如果我已经拥有 aws-sdk (javascript)，还需要 amazon-cognito-identity-js 吗？

Question

我有一个使用 aws-sdk 的 javascript 项目。不，我想使用 amazon-cognito-identity-js。页面上写着：

Note that the Amazon Cognito AWS SDK for JavaScript is just a slimmed down version of the AWS Javascript SDK namespaced as AWSCognito instead of AWS. It references only the Amazon Cognito Identity service.

事实上，我可以创建 CognitoIdentityServiceProvider：

CognitoIdentityServiceProvider = new AWS.CognitoIdentityServiceProvider();

但我认为如何验证用户身份？根据 amazon-cognito-identity-js 文档：

authenticationDetails = new CognitoIdentityServiceProvider.AuthenticationDetails({Userame: ..., Password: ...});
cognitoUser.authenticateUser(authenticationDetails, ...)

但是 CognitoIdentityServiceProvider 对象没有 AuthenticationDetails 属性。

当我使用 aws-sdk 而不是 amazon-cognito-identity-js 时，是否需要做一些不同的事情？

或者我的假设是错误的，我需要 aws-sdk 和 amazon-cognito-identity-js？

Answer 1

不，你不知道。您可以像这样使用 aws-sdk 登录：

const cognito = new aws.CognitoIdentityServiceProvider({ region });
cognito.adminInitiateAuth({
  AuthFlow: 'ADMIN_NO_SRP_AUTH',
  ClientId: clientId,
  UserPoolId: poolId,
  AuthParameters: {
    USERNAME: email,
    PASSWORD: password,
  },
});

Answer 2

用户名密码认证需要ADMIN_NO_SRP_AUTH。我还添加了处理错误和成功的功能。有关数据中发送的响应和令牌的更多详细信息，您可以查看参考资料。

const cognito = new AWS.CognitoIdentityServiceProvider();
    cognito.adminInitiateAuth({
        AuthFlow: 'ADMIN_NO_SRP_AUTH',
        ClientId: 'clientId',
        UserPoolId: 'poolId'
        AuthParameters: {
            USERNAME: 'userName',
            PASSWORD: 'password',
        },
    }, function(err, data) {
        if (err) {
            console.log(err, err.stack);
        }
        else {
            console.log(data);
        }
    });

Answer 3

对于未来的任何人

以下是我使用

注册和登录的方法

    private cognito = new AWS.CognitoIdentityServiceProvider();

注册：

public async register(event) {

 try {

     if(!this.validator.isObjectNotEmpty(event.body)){                
         throw new Error("you have to include body to insert into DB !!");
     }

     const usermodel = event.body;
     if (this.validator.isEmailNotValid(usermodel)) {
         throw new Error("Not Valid username or password");
     }

     const email = usermodel.email.toLowerCase();
     const password = usermodel.password;

     const createUserParams = {
         UserPoolId: Cognito_User_Pool, // From Cognito dashboard 'Pool Id'
         Username: email,
         MessageAction: "SUPPRESS", // Do not send welcome email
         TemporaryPassword: password,
     };

     const user = await this.cognito.adminCreateUser(createUserParams).promise();
     this.logger.info("created user: ",user);

     const initiateAuthParams = {
         AuthFlow: "ADMIN_USER_PASSWORD_AUTH",
         ClientId: Cognito_User_Pool_Client,
         UserPoolId: Cognito_User_Pool,
         AuthParameters: {
             USERNAME: email,
             PASSWORD: password
         }
     };
     const challengesResponse = await this.cognito.adminInitiateAuth(initiateAuthParams).promise();
     this.logger.info("challengesResponse: ",challengesResponse);

     const userPasswordParams = {
         Password: password,
         UserPoolId: Cognito_User_Pool,
         Username: email,
         Permanent: true
     };

     return this.cognito.adminSetUserPassword(userPasswordParams).promise();

 } catch (error) {
     console.log("error: ", error);
     throw error;
 }
}

登录

public async login(event) {
 try {

     this.logger.info("login - event: ",JSON.stringify(event));
     this.logger.info("register - Cognito_User_Pool: ",Cognito_User_Pool);
     this.logger.info("register - Cognito_User_Pool_Client: ",Cognito_User_Pool_Client);

     if(!this.validator.isObjectNotEmpty(event.body)){                
         throw new Error("you have to include body to insert into DB !!");
     }

     const usermodel = event.body;
     if (this.validator.isEmailNotValid(usermodel)) {
         throw new Error("Not Valid username or password");
     }

     const email = usermodel.email.toLowerCase();
     const password = usermodel.password;

     const initiateAuthParams = {
         AuthFlow: "ADMIN_USER_PASSWORD_AUTH",
         ClientId: Cognito_User_Pool_Client,
         UserPoolId: Cognito_User_Pool,
         AuthParameters: {
             USERNAME: email,
             PASSWORD: password
         }
     };
     return await this.cognito.adminInitiateAuth(initiateAuthParams).promise();
 } catch (error) {
     console.log("error: ", error);
     throw error;
 }
}

登录函数return响应如下：

   "tokenObj": {
    "ChallengeParameters": {},
    "AuthenticationResult": {
        "AccessToken": "eyJraWQiOiI1ZFN5R0tEUFE2WnhTbzJ4N01QTXpxaVRPNXZoK3p5NkJaOFZhRzV1M0Z3PSIsImFsZyI6IlJTMjU2In0.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.4vswc6-ei6SFlbN0k_C8PAtmEK294oFfylYZW3hhmHqMT49d_JWdDPR8XgA7n5cLqtLJsiG4PVh9SyxdirpUTmC0yra2GZejNWP8eVHG9-JUq_xXQ81a8AYEb1KZJBAv0j2F1ZLuCFaiFvbOBFEGSlJXp4e2bLz-NWlSbEAUbxZV5BKrRmZEeXJUxw_DO5R30SG1D2qcOn_1mnbdfTH-W0ZMuuMJsHWQBsO7QEtyMI62XG35WRDijzzMr6ekbLyIQ7J77dYcsmTdR6S5nTNWE1yrGYtkdxk2x35nYob06PAWdnWL5OK2G1aiJ97BMvM65VtjX8VQZbAoalIII-PbCA",
        "ExpiresIn": 3600,
        "TokenType": "Bearer",
        "RefreshToken": "eyJjdHkiOiJKV1QiLCJlbmMiOiJBMjU2R0NNIiwiYWxnIjoiUlNBLU9BRVAifQ.FKN-KM415xH-TioTkKjmoy_NV1AssBq9GlkweHAK7TuYzMeI_qMfeL00Qv6MiOPFMJ6UG7cLKfJjkdyI1vK09p9lk5_wor3FoCX1Dvt3DK3SKzeyqW6ULQL1IQmNunPhpC3sARom0q74YxSaQKdF_6PgDjNnf0-aI1XGkZYZUw69BZGQDVobTx8nR_Lf6srF622s0JuhaClDfvIgqjZun7AIFlxgNUKL6uuMgmSrRJm7GvAqAnTQpmQD2sdz6D3fWeoVja8LRpc_QMbZPhjZmOoRrQJ3VA-m0M0TsNMvQSw6px-WS-hMUH4RFeFasrbmoiUKIU8-MXltyPVltoy0qg.dHBgjs1NAOAROzD6.vi7DzrqzLkuHGuuGY1vNZaYmdDp0-EliwxTtEOaMboVlMCm9KZv0tU06ovQ9Z2CbplqJdEaAu-YZSG3Oeagqj5JJ2-739C0yvA0J_qE2Ehn5gCUMuiPPOjakIczOcI8wcRItsTGqt1GFmyq4DSnX-pjc9GG2QWpgmcsoDyxodIv1wTu7YN15cGK0YN_xSKolcCn04gCzqXCDkQyUqX-Sr7QqD2o-aQC1ynmKz1tJGxRM3I6rzbcRZkNvUK02wSIUMeY05hJNAdKBItIE0t45Sk5_EV3mzLgebC39Q6z-kRKNQwhyQKrcXg71aRJGjD3HH61VEoops4wcgRCmNnI7u-9JjJic_SDU_Fw-9W1L8BxZZKPsJrjOvJroDFc1xX2njgeivo6ZpRWTg3nQphMTqJFSYHnWcEmw3EW1uUhN7e1J2bdGuebW40Opf5zMXo2V4-OBI3UMxTOVZEPit4g3yLDHQDAfPZllPPRf5H8Kf1Qe54fEq77sKb32I5PH7t-7xQ79iE5KX6BZjsLjwHMAlGNtS7WSE-U0yAsjUFFH8pA7eYR5ysz3o9L7jJsNCyNb06YU_QX5mozGlspLMNs4qpUcWkFGhSNG6qTRMREpzRfELU82Dc-LirJ1425zPQNsQV1CGGtlDoXVA-RCIgnMG1hslfpIllKm_IH-5yyPMfH2UFdr7jdRjt9crFyFu9ktGkHjnAqH_ZUcueL0q_vrIqmkGcBcrQQRY9jCSC4VNeGhKe9ecJciAHUCktkZuut5yI0De0hXANoaoxeIucJlox57nxHnQTD0Q0LEuXvfqG9M9sNdB4GGrt1rYR58ZWa8zc5udoKDMxvrb6GEeDI1co2mLEt3XghjcJBJqB8nqwofXZDxiDSXQ53R9L5U8wDlxhxZxPMDKFL6wu4gqDjw4m60R8mOvfOI2Gz_yelqfk5CxD6Ts_HVbv9TRbsV0adQ4S8n5Cktf5miWUtFCOktruS2_fKfB6TF1yzisgxQpJFD7B1qdTcBu0N82KgHrljoBlVKiwGdalL52H-cJkNkagZIBQYXvlvkBrbsSNAp1CeUiqXbddHku47RNjXSPUMN1aoHdEL14_7zbaPYBMxgEsmqjP67B45QKmTyDDsOkf8aSdAWYFKvj3c_4Cn_LczLU-YcuzE4UZvd6BQK70MiKBIsd3DU4rdKTDjAsN73mJ_U-_8r34jocny4rzbO_NostPjgqUugoO2bGhfr_PUgXb7sm_wrKlvjFnUcOLpQSBxlZL_z25e8vZokRn4QiNa83_VG6xyp77-c_DQqLC3RdwXOyRmCEXkM2D10cBNQpkAzCBMyP9FO3mJZcQ.aAJlWM76hqlRprKY8P_Qmw",
        "IdToken": "eyJraWQiOiJoWmpBMXl1d2JjT1lyNks5dnhQc2ZKVDhXSHRrYm51WmZlTURlK0dBbWR3PSIsImFsZyI6IlJTMjU2In0.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.L9nNSlcQakRfVpAo-bf9jnXFrhov8iD9j3R2UI7x5eUT42OBrvSdEk3Y2JtFKQt1FpxBFLqtWCRyY0Wxlcq3MzZE04zIFBC02WmV24vF1QS9TxpBYAm8NkyNoW-7Lqe7CIWhK_DHMxSRpzo87txmwpID6xwd9JOlZG04L76hkXr0_2JgM2KuvB0lKL0v4heHK8e2ht_VuKBPNpVvMIbIA2xN22LRhivfG8EMeHmF3jhhQYggi1Pczb2WEviPUqebmLhdvjJpHC9OMVhvN4GMcr0JVv-GepxSCrNSFoXPDNZaznJbDJW0Zt3xY9bWek_l62v1Wm0a1h7V7nxw8a0Csw"
        }
    }
}

如果我已经拥有 aws-sdk (javascript)，还需要 amazon-cognito-identity-js 吗？

Do I need amazon-cognito-identity-js if I already have the aws-sdk (javascript)?

amazon-web-services

node.js

aws-sdk-js