@webiny/api-security-okta

@webiny/api-security-cognito

A plugin that enables Amazon Cognito based authentication in @webiny/handler handlers.

Install

npm install --save @webiny/api-security @webiny/api-security-cognito

Or if you prefer yarn:

yarn add @webiny/api-security @webiny/api-security-cognito

Quick Example

The set up process consists only of a single step, and that's adding the plugins in your handler:

import { createHandler } from "@webiny/handler-aws";
import graphqlPlugins from "@webiny/handler-graphql";
import logsPlugins from "@webiny/handler-logs";
import securityPlugins, { SecurityIdentity } from "@webiny/api-security";
import cognitoAuthenticationPlugins from "@webiny/api-security-cognito";

// Imports plugins created via scaffolding utilities.
import scaffoldsPlugins from "./plugins/scaffolds";

const debug = process.env.DEBUG === "true";

export const handler = createHandler({
  plugins: [
    securityPlugins(),
    cognitoAuthenticationPlugins({
      region: process.env.COGNITO_REGION,
      userPoolId: process.env.COGNITO_USER_POOL_ID,
      identityType: "user"
    }),
    logsPlugins(),
    graphqlPlugins({ debug }),
    scaffoldsPlugins()
  ],
  http: { debug }
});

With all the plugins in place, you should be able to retrieve the current identity in your handler application code, via the context.security object:

const identity = context.security.getIdentity();

Changelog

5.20.0-beta.0 (2021-12-17)

Bug Fixes

• api-headless-cms-ddb-es: ref field id and entryId exact matches (#2125) (b75b746)
• app-headless-cms: date field value is sent as null if not changed (#2126) (bc474da)
• app-headless-cms: title field when in object field (#2127) (5cd06ef)
• fixes after code review (753e3dc)
• system tenant (#2119) (536031d)
• update remoteRuntimeLogs command's type, description, and usage example (3b836fb)
• update property name (bfb0ff0)
• use new build/watch methods (810821d)
• api-file-manager: list tags when no tags defined (#2113) (eaee831)
• api-headless-cms: empty nested object as first field (#2120) (c3e3829)
• api-headless-cms: get locale (a27e06e)
• api-headless-cms: schema break when no fields in nested obj (#2098) (34f95dc)
• api-i18n-ddb: missing locale plugin (#2115) (b068f68)

Features

• api-headless-cms: clone model (#2129) (9844b41)
• app-headless-cms: clone content model (#2131) (58a574a)
• removing the rerender button, only gql left (e7c6e16)
• app-page-builder: rerender page functionality (45bfb1b)
• deploy: added hooks before & after build (6f09113)