使用 AWS Cognito 托管 UI（代码授权）验证后，我该如何处理令牌？ 后续 API 调用没有令牌

Question

MY goal is to setup the Cognito Hosted UI to validate users after login. I have followed the steps laid out in the OAuth2 blog here: https://developer.okta.com/blog/2018/04/10/oauth-authorization-code-grant-type

My steps are as follows.

1. User logs into the AWS provided login screen.
2. It redirects to my website and I pull down the authorization code in Angular.
3. I send the code as part of my headers to the backend Nodejs
4. I use the code to get a token and then validate the token

This stream works but then what? I want to validate the AWS token for each API call but I have no idea how to access the token.

I am guessing that I am either missing the point of this procedure or that the token is somewhere I am unaware of.

Any help would be greatly appreciated.

Answer 1

Usually you have your own UI that redirects to Cognito to authenticate, after which the UI sends the access token to the API on every request.

All of the code samples on my Quick Start Page work like this and use Cognito.

If it helps, this is what the OAuth Technical Messages look like. Feel free to ask any follow up questions