amazonka-cognito-identity
Version 1.3.1 revision 0 uploaded by BrendanHay.
Package meta
- Synopsis
- Amazon Cognito Identity SDK.
- Description
Amazon Cognito Amazon Cognito is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. Amazon Cognito uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application. Using Amazon Cognito, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon), and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials. To provide end-user credentials, first make an unsigned call to GetId. If the end user is authenticated with one of the supported identity providers, set the
Logins
map with the identity provider token.GetId
returns a unique identifier for the user. Next, make an unsigned call to GetCredentialsForIdentity. This call expects the sameLogins
map as theGetId
call, as well as theIdentityID
originally returned byGetId
. Assuming your identity pool has been configured via the SetIdentityPoolRoles operation,GetCredentialsForIdentity
will return AWS credentials for your use. If your pool has not been configured withSetIdentityPoolRoles
, or if you want to follow legacy flow, make an unsigned call to GetOpenIdToken, which returns the OpenID token necessary to call STS and retrieve AWS credentials. This call expects the sameLogins
map as theGetId
call, as well as theIdentityID
originally returned byGetId
. The token returned byGetOpenIdToken
can be passed to the STS operation AssumeRoleWithWebIdentity to retrieve AWS credentials. If you want to use Amazon Cognito in an Android, iOS, or Unity application, you will probably want to make API calls via the AWS Mobile SDK. To learn more, see the AWS Mobile SDK Developer Guide.The types from this library are intended to be used with amazonka, which provides mechanisms for specifying AuthN/AuthZ information and sending requests.
Use of lenses is required for constructing and manipulating types. This is due to the amount of nesting of AWS types and transparency regarding de/serialisation into more palatable Haskell values. The provided lenses should be compatible with any of the major lens libraries such as lens or lens-family-core.
See Network.AWS.CognitoIdentity and the AWS API Reference to get started.
- Author
- Brendan Hay
- Bug reports
- https://github.com/brendanhay/amazonka/issues
- Category
- Network, AWS, Cloud, Distributed Computing
- Copyright
- Copyright (c) 2013-2015 Brendan Hay
- Homepage
- https://github.com/brendanhay/amazonka
- Maintainer
- Brendan Hay <brendan.g.hay@gmail.com>
- Package URL
- n/a
- Stability
- n/a