search

jagregory / cognito-local

Local emulator for Amazon Cognito
MIT License
278 stars 67 forks source link

The assign of AccessToken is wrong #383

Closed lucianogalvaodesousa closed 1 year ago

lucianogalvaodesousa commented 1 year ago

aws --endpoint http://localhost:9229 --profile LS cognito-idp initiate-auth --client-id $client_id --auth-flow USER_PASSWORD_AUTH --auth-parameters USERNAME=maria,PASSWORD=maria123 { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": {}, "AuthenticationResult": { "AccessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkNvZ25pdG9Mb2NhbCJ9.eyJhdXRoX3RpbWUiOjE2ODY5NjYwNTEsImNsaWVudF9pZCI6IjlmMWNndTA4eG5lMnQ0MzI1aXpvb3RodXYiLCJldmVudF9pZCI6ImUzZDRlYmRkLTYwMTgtNGEwNC04NWUyLTdhYzNiYWI5ZTYwMiIsImlhdCI6MTY4Njk2NjA1MSwianRpIjoiMmViNDgyYTgtMWIwZC00YzQ1LThkYTQtYWQ2MmYyNTAxMWQ2Iiwic2NvcGUiOiJhd3MuY29nbml0by5zaWduaW4udXNlci5hZG1pbiIsInN1YiI6IjBmNDYzOTM4LTc2NjMtNGI2Zi05YjZlLTg3NjczOTVkMDRkZSIsInRva2VuX3VzZSI6ImFjY2VzcyIsInVzZXJuYW1lIjoibWFyaWEiLCJleHAiOjE2ODcwNTI0NTEsImlzcyI6Imh0dHA6Ly9sb2NhbGhvc3Q6OTIyOS9sb2NhbF81V2lZMW1ORCJ9.1utkz0tRnRXICSfBDoJjreYfcC_8AegdhtRRpTWv9Iiwv2dupC6gqwNc_6lGP3QFYEqMjK7diZsj_04rUrnEIVcGShMtpYH2H0iQOW793BmVZnbJ6RCrHwsNice_ZPXfvT3ozimojxHRU7LCLkWXO0PEtNLMec0FE0WCpkZsjf6JX0WKTNGdOu1g36xZ26mg_6ztVOePnI6RTQVDX02zOd9JtCqy0-OQsfphbF3QCu7GfKk0IZrAtmQogEKPEcRUvUvbxtjyKoTGCdjrd-CEEdM0A5ozE2QOrNHCJxsKVVXXiB6ahoAsx2_CScOjc29KCTraIt68q1Suwt2WjLLr5A", "RefreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2duaXRvOnVzZXJuYW1lIjoibWFyaWEiLCJlbWFpbCI6Im1hcmlhIiwiaWF0IjoxNjg2OTY2MDUxLCJqdGkiOiIwMTVkNDVlNC02MzVlLTRlNzUtODBjOC0wYjliNDQ2N2VmMzUiLCJleHAiOjE2ODc1NzA4NTEsImlzcyI6Imh0dHA6Ly9sb2NhbGhvc3Q6OTIyOS9sb2NhbF81V2lZMW1ORCJ9.2guRgUfZqTGA7flsDWTh7rbWnqroBben9DFIT95KcxKZzaVwOI_BpUwP0iFS9-pk6XeEPI5vu2H-kbp2wWxTtk0daxjbBr-e0MBP_2FiAvbw2HR-4rDnpSTV4LtEIkIaoRDEpV4yxy1SY4ConS-X6tPxZ-QFb5PHi23yfcz9apQZ-FGY2VM5V7H6y6O1bx0sTLTE0lCfQImZkL1mVV_IAVfyEMw7si9ITOFprD_FKltOP-sGSdrPuyGpsciZxEyLl2Sla7UPvfHMBZ-smhBCEw_zLEwJNG1hjqs5fUbcN0t40rrWSWlXp7oGotcgEvmGdtKcqwOvl97tSluZQMxUlg", "IdToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkNvZ25pdG9Mb2NhbCJ9.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.thQVzMCfmxpg-zXSm6_uUwJ0nZ2qQIpV3vJUFAPMKsfbevIVDPjkpFZVOhQ00I9pGJKiv8loq6_WT_OKNzRPMqXzCjtTOLRWKxAbNqGDSzltotIACyxN6QLqDjp9xu9AXprjA6NXjBOKrbIAcg7D7lOAbUHweuNI8Exvr-KldAkqr0wPovx5iWxolwq0uQLcz_5TbHmMKP8iCVWG9iGTYM4dvgvnndwbb1Ca3X0-Seaz-0bv9RhkbBP3NggFUGNCbJrV0epDL-Je1zryf5rdW3kxcOYCPVCXwC_6DUdaTsJIXKgvMJeQxNd3j651wmVcKjLrRFf1RpxEAYzRT5Me3Q" } }

When I put the returned AccessToken https://jwt.io/ o the return is an Invalid Signature. When I do the same process against AWS the Signature is valid.

lucianogalvaodesousa commented 1 year ago

Sorry, I was wrong. I forgot to put the correct public key