How to check Cognito Web redirect token after successful login about warrant HOT 3 OPEN

Here is a link that might help:

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html

It looks like the "code" value you receive needs to then be passed to the following endpoint:

https://docs.aws.amazon.com/cognito/latest/developerguide/token-endpoint.html

Sample request:

POST https://mydomain.auth.us-east-1.amazoncognito.com/oauth2/token&
Content-Type='application/x-www-form-urlencoded'&
Authorization=Basic aSdxd892iujendek328uedj

grant_type=authorization_code&
client_id=djc98u3jiedmi283eu928&
code=AUTHORIZATION_CODE&
redirect_uri=com.myclientapp://myclient/redirect

Sample response:

HTTP/1.1 200 OK
Content-Type: application/json

{ 
 "access_token":"eyJz9sdfsdfsdfsd", 
 "refresh_token":"dn43ud8uj32nk2je", 
 "id_token":"dmcxd329ujdmkemkd349r",
 "token_type":"Bearer", 
 "expires_in":3600
}

The id_token, refresh_token and access_token can then be used with the .check_token() method. If this method returns False the access_token is valid. If not it will use the refresh_token and return a new access_token that can be accessed using u.access_token after the .check_token() method call.

u = Cognito('your-user-pool-id','your-client-id',
    id_token='id-token',refresh_token='refresh-token',
    access_token='access-token')

u.check_token()

Hope this helps!

from warrant.

+1

from warrant.

I know this is an old post, but for anyone else looking for solutions to this, you can just change the https://<your_domain>/login?response_type=code&client_id=<your_app_client_id>&redirect_uri=<your_callback_url> url.

Change response_type from code to token to get the login tokens

from warrant.