Secure the AWS API Gateway with Cognito User Pools & Cognito Authorizer

[@calmingcoffeerain6217]

Thank you that explanation was clear and very helpful to visualize. Well done on a clean explanation

[@mantrax314]

Thanks!

[@Majesticcloud]

You're welcome and thank you too!

[@luiscarlosjayk]

Question: What's the access token for? Can you use that instead of the id token?

[@Elbrond1991]

Great video! Helped heaps. Just a question, how might I be able to set up the exchange of the authorization code for the tokens in my application?

[@JozsefPetenyi]

Thanks for this video. Saved me a ton of time

[@Majesticcloud]

Glad it helped

[@HarshitKumar-dy3bs]

Thank you! But its a good practice to send Access Token instead of IdToken. How can we set that up?

[@AbdulRahmanMoubarak-w1u]

did you find out how to use access token instead?

[@daniela130783]

Lo mejor que encontre!!! cuanto tiempo puede durar el Token??? se puede revocar el Token cada vez que se invoque al Lambda? Saludos

[@AbdulRahmanMoubarak-w1u]

I have a question how can I use the access token instead of the id token in the api gateway?

[@davidgomez6823]

Hello, how can I use this without the hosted UI at all?

[@KarimFayed-oy5oo]

Great Video! Thanks a lot, but how can I have the data used in registration ex email be used and saved in the backend which is also a lambda

[@glenwang1746]

Thank you so much. Your content helped me

[@HoaPham-iv2ft]

I got this error "An error occurred (InvalidParameterException) when calling the AdminInitiateAuth operation: Auth flow not enabled for this client' When I tried to run your command to get token.

[@iamchiragarora]

What if a Lambda Function is returning HTML Code. How to authenticate that? In simple words, if the Authentication Header is not present or is not valid, how to redirect to the Cognito UI?

[@MrThejoseph007]

hey, have you figured out the approach to achieve this with cookies?

[@ArgKilljoy]

Hi! I have one question, though. Requests to the API work fine from Postman once I've added the Cognito authorizer. But I'm now getting a CORS error when calling the api from my localhost. Do you have any suggestions? Thank you

[@Majesticcloud]

Postman is not a browser so it doesn't enforce CORS policy. However in other places such as a browser you might have CORS enforcement. So you need to enable CORS headers (Access-Control-Allow-Origin) in API Gateway so they are returned with every response.

[@myz540]

Very helpful. The cognito documentation is very bad at showing how to actually get a token.

[@bishop339]

Good.

[@vaibhavsrivastava4645]

Good