Product
Introducing SSO
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
@webiny/api-security-cognito
Advanced tools
Readme
A plugin that enables Amazon Cognito based authentication in @webiny/handler
routes.
npm install --save @webiny/api-security @webiny/api-security-cognito
Or if you prefer yarn:
yarn add @webiny/api-security @webiny/api-security-cognito
The set up process consists only of a single step, and that's adding the plugins in your handler:
import { createHandler } from "@webiny/handler-aws";
import graphqlPlugins from "@webiny/handler-graphql";
import logsPlugins from "@webiny/handler-logs";
import securityPlugins, { SecurityIdentity } from "@webiny/api-security";
import cognitoAuthenticationPlugins from "@webiny/api-security-cognito";
// Imports plugins created via scaffolding utilities.
import scaffoldsPlugins from "./plugins/scaffolds";
const debug = process.env.DEBUG === "true";
export const handler = createHandler({
plugins: [
securityPlugins(),
cognitoAuthenticationPlugins({
region: process.env.COGNITO_REGION,
userPoolId: process.env.COGNITO_USER_POOL_ID,
identityType: "user"
}),
logsPlugins(),
graphqlPlugins({ debug }),
scaffoldsPlugins()
],
debug
});
With all the plugins in place, you should be able to retrieve the current identity in your handler application code, via the context.security
object:
const identity = context.security.getIdentity();
FAQs
Security authentication plugin for AWS Cognito
The npm package @webiny/api-security-cognito receives a total of 307 weekly downloads. As such, @webiny/api-security-cognito popularity was classified as not popular.
We found that @webiny/api-security-cognito demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.