REST API 使用 AWS Cognito 的 oauth2 类型身份验证

REST API oauth2 type authentication using AWS Cognito

我在 nodejs 休息 api。我的移动应用程序会占用我的休息时间 api。我可以使用 aws cognito 为我的移动应用程序实施 oauth2 类型身份验证吗?如果我实现 oauth2,我需要资源所有者密码授予。

亚马逊 Cognito 的 Federated Identity feature is not an authentication provider. It vends AWS credentials for well known providers like Facebook, Google, Cognito User Pools, etc. or for custom developer providers. These custom developer provider can use any authentication protocol as long as they talk to our services from the back end and use the OpenId tokens vended in back end from their mobile apps. You can read more about this here

然而,

Cognito User Pools 是一个身份验证提供程序,一旦用户通过身份验证就会出售 OpenId 令牌。这些令牌也可以使用联合身份流交换 AWS 凭证。