Connect to AWS Cognito using API Gateway and Lambda Function as a proxy for OAuth applications and as an Identity Provider via OpenID Connect.
- Node.js 18+
- AWS CDK
- pnpm 8.7.4+
cd package
pnpm install
cdk deploy| key | description | require |
|---|---|---|
| env | The CloudFormation Sack to be built and the prefix name to be set for the AWS resource. | No |
Now that API Gateway v1 (Rest API) is built, set the OAuth application and API Gateway endpoint to "Federated identity provider sign-in" in the Cognito user pool.
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-oidc-idp.html
| Name | Description of the value to be set | | Client ID | A client ID of Your OAuth 2.0 application. | | Client secret | A client secret of Your OAuth 2.0 application. | | Authorized scopes | openid read:user user:email | | Attribute request method | GET | | Setup method | Auto fill through issuer URL | | Issuer URL | The endpoint URL for the default stage of your API Gateway. |
The stage name of the deployed API Gateway is default.
The value to be set for the Issue URL is as follows:
https://~{API ID}.execute-api.{AWS Region}~.amazonaws.com/default