search

tafalk / tafalk-web

A no-look-back site for streams of consciousness to be grown by Woolfies
https://tafalk.com
MIT License
1 stars 0 forks source link

Change AppSync security type #6

Closed vahdet closed 4 years ago

vahdet commented 5 years ago

AppSync security can be APIKEY for development purposes. Choose one of the following for producion:

If AMAZON_COGNITO_USER_POOLS will be used, the Cognito User Pool Group TafalkUsers is already created and fed.

vahdet commented 5 years ago

Going to use AMAZON_COGNITO_USER_POOLS after reading this article and noticing that AWS Amplify GraphQL docs gives it in CLI alternatives unlike AWS_IAM.

vahdet commented 5 years ago

Added @aws_auth(cognito_groups: ["TafalkUsers"]) to the Appsync queries and mutations that should be accessed via the authenticated users and left the rest as the default ALLOW.

vahdet commented 5 years ago

Halted usage of AWS Cognito User Pools due to the issue with unauthenticated users https://github.com/aws-amplify/amplify-js/issues/1252

vahdet commented 4 years ago

Changed to AMAZON_COGNITO_USER_POOLS as planned