Tag: cognito

Do you really understand the sign out of AWS Cognito?

Henry • • Leave a comment

I notice that the Cognito tokens can be used to consume other AWS services after the user logout. Moreover, even I revoke the token calling the AdminUserGlobalSignOut API, I am still seeing the response as if the token is valid. Actually users can sign out from all devices where they are currently signed in when you revoke all of the…

Read More »

How does Oauth 2.0 work with AWS Cognito?

Henry • • Leave a comment

As you may know, with Cognito user pools, you can enable your web and mobile app users to sign up and sign in. Moreover Cognito user pools support the OAuth 2.0 authorization framework for authenticating users. For example, after you configure a domain for the user pool [1], Cognito automatically provisions a hosted UI that enables you to easily add…

Read More »