Package com.amazonaws.services.cognitoidentity

Synchronous and asynchronous client classes for accessing AmazonCognitoIdentity.

See: Description

Interface Summary

Interface	Description
AmazonCognitoIdentity	Interface for accessing AmazonCognitoIdentity.
AmazonCognitoIdentityAsync	Interface for accessing AmazonCognitoIdentity asynchronously.

Class Summary

Class	Description
AmazonCognitoIdentityAsyncClient	Asynchronous client for accessing AmazonCognitoIdentity.
AmazonCognitoIdentityClient	Client for accessing AmazonCognitoIdentity.

Package com.amazonaws.services.cognitoidentity Description

Synchronous and asynchronous client classes for accessing AmazonCognitoIdentity. Amazon Cognito

Amazon Cognito is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. Amazon Cognito uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon), and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

To provide end-user credentials, first make an unsigned call to GetId. If the end user is authenticated with one of the supported identity providers, set the Logins map with the identity provider token. GetId returns a unique identifier for the user.

Next, make an unsigned call to GetOpenIdToken, which returns the OpenID token necessary to call STS and retrieve AWS credentials. This call expects the same Logins map as the GetId call, as well as the IdentityID originally returned by GetId . The token returned by GetOpenIdToken can be passed to the STS operation AssumeRoleWithWebIdentity to retrieve AWS credentials.