CODEWITHSUNDEEP
amazon-web-servicesamazon-cognito
ethan123
ethan123

Reputation: 1084

How to link developer authenticated user across devices in Cognito

I'm just trying to get a handle over this framework and I want to confirm that my approach is correct.

I can authenticate my own user using the method: getOpenIdTokenForDeveloperIdentity and supplying an IdentityPoolId and a Logins key-pair with my Developer provider name and a token which I provide.

Now, from what I understand, when the user logs into a second device, in order for Cognito to understand that this is the same user, I have to provide it with an IdentityId. However, I'm not sure of the best way to get the IdentityId programmatically so that it will match up with the initial login.

The only technique I can think of is to store the IdentityId in my own DB and provide my own method for retrieving it. Is this the best way? Or should I be working with this framework differently?

I'm still a beginner to AWS in general and I'm just trying to understand the best practices for this framework.

BTW, I'm implementing the Android SDK and the PHP SDK for my backend.

Upvotes: 1

Views: 983

Answers (2)

perpil
perpil

Reputation: 1584

When you use getOpenIdTokenForDeveloperIdentity, it returns the identity id associated with the user identifier you provided. So if the user identifier you use is the users' username, when you call getOpenIdTokenForDeveloperIdentity with that same username from the second device, it will return the associated identity id. There is no need to store the identity id unless you want to, it is provided to you each time you call getOpenIdTokenForDeveloperIdentity.

This blog post may be of further help:

http://mobile.awsblog.com/post/Tx2FL1QAPDE0UAH/Understanding-Amazon-Cognito-Authentication-Part-2-Developer-Authenticated-Ident

Upvotes: 2

E.J. Brennan
E.J. Brennan

Reputation: 46879

When you use Cognito, your user first authenticates with an Identity Provider (such as facebook, google or other Oauth provider), and the token you get back from it is sent to Cognito and is the key to tying your users information together across logins on other devices.

You don't need to store this information in a database, unless you are writing you own custom identity provider and not using one of the public ones available.

Upvotes: 0

Related Questions