Advanced workflows

1import { Amplify } from 'aws-amplify';
2import {
3  fetchAuthSession,
4  CredentialsAndIdentityIdProvider,
5  CredentialsAndIdentityId,
6  GetCredentialsOptions,
7  AuthTokens,
8} from 'aws-amplify/auth';
9
10// Note: This example requires installing `@aws-sdk/client-cognito-identity` to obtain Cognito credentials
11// npm i @aws-sdk/client-cognito-identity
12import { CognitoIdentity } from '@aws-sdk/client-cognito-identity';
13
14// You can make use of the sdk to get identityId and credentials
15const cognitoidentity = new CognitoIdentity({
16  region: '<region-from-config>',
17});
18
19// Note: The custom provider class must implement CredentialsAndIdentityIdProvider
20class CustomCredentialsProvider implements CredentialsAndIdentityIdProvider {
21
22  // Example class member that holds the login information
23  federatedLogin?: {
24    domain: string,
25    token: string
26  };
27
28  // Custom method to load the federated login information
29  loadFederatedLogin(login?: typeof this.federatedLogin) {
30    // You may also persist this by caching if needed
31    this.federatedLogin = login;
32  }
33
34  async getCredentialsAndIdentityId(
35    getCredentialsOptions: GetCredentialsOptions
36  ): Promise<CredentialsAndIdentityId | undefined> {
37    try {
38
39      // You can add in some validation to check if the token is available before proceeding
40      // You can also refresh the token if it's expired before proceeding
41
42      const getIdResult = await cognitoidentity.getId({
43        // Get the identityPoolId from config
44        IdentityPoolId: '<identity-pool-id-from-config>',
45        Logins: { [this.federatedLogin.domain]: this.federatedLogin.token },
46      });
47
48      const cognitoCredentialsResult = await cognitoidentity.getCredentialsForIdentity({
49        IdentityId: getIdResult.IdentityId,
50        Logins: { [this.federatedLogin.domain]: this.federatedLogin.token },
51      });
52
53      const credentials: CredentialsAndIdentityId = {
54        credentials: {
55          accessKeyId: cognitoCredentialsResult.Credentials?.AccessKeyId,
56          secretAccessKey: cognitoCredentialsResult.Credentials?.SecretKey,
57          sessionToken: cognitoCredentialsResult.Credentials?.SessionToken,
58          expiration: cognitoCredentialsResult.Credentials?.Expiration,
59        },
60        identityId: getIdResult.IdentityId,
61      };
62      return credentials;
63    } catch (e) {
64      console.log('Error getting credentials: ', e);
65    }
66  }
67  // Implement this to clear any cached credentials and identityId. This can be called when signing out of the federation service.
68  clearCredentialsAndIdentityId(): void {}
69}
70
71// Create an instance of your custom provider
72const customCredentialsProvider = new CustomCredentialsProvider();
73Amplify.configure(awsconfig, {
74  Auth: {
75    // Supply the custom credentials provider to Amplify
76    credentialsProvider: customCredentialsProvider
77  },
78});

1import Expo from 'expo';
2import React from 'react';
3import { fetchAuthSession } from 'aws-amplify/auth';
4
5const App = () => {
6  const signIn = async () => {
7    const { type, token, expires } =
8      await Expo.Facebook.logInWithReadPermissionsAsync(
9        'YOUR_FACEBOOK_APP_ID',
10        {
11          permissions: ['public_profile']
12        }
13      );
14    if (type === 'success') {
15      // sign in with federated identity
16      try {
17        customCredentialsProvider.loadFederatedLogin({
18          domain: 'graph.facebook.com',
19          token: token
20        });
21        const fetchSessionResult = await fetchAuthSession(); // will return the credentials
22        console.log('fetchSessionResult: ', fetchSessionResult);
23      } catch (err) {
24        console.log(err);
25      }
26    }
27  };
28
29  // ...
30
31  return (
32    <View style={styles.container}>
33      <Button title="FBSignIn" onPress={signIn} />
34    </View>
35  );
36};

1import { signIn } from 'aws-amplify/auth';
2
3async function handleSignIn(username: string, password: string) {
4  try {
5    await signIn({
6      username,
7      password,
8      options: {
9        clientMetadata: {} // Optional, an object of key-value pairs which can contain any key and will be passed to your Lambda trigger as-is.
10      }
11    });
12  } catch (err) {
13    console.log(err);
14  }
15}

1import { fetchAuthSession } from 'aws-amplify/auth';
2import Route53 from 'aws-sdk/clients/route53';
3
4async function changeResourceRecordSets() {
5  try {
6    const { credentials } = await fetchAuthSession();
7
8    const route53 = new Route53({
9      apiVersion: '2013-04-01',
10      credentials
11    });
12
13    // more code working with route53 object
14    //route53.changeResourceRecordSets();
15  } catch (err) {
16    console.log(err);
17  }
18}

1import { Amplify } from 'aws-amplify';
2import { TokenProvider, decodeJWT } from 'aws-amplify/auth';
3
4// ...
5
6const myTokenProvider: TokenProvider = {
7  async getTokens({ forceRefresh } = {}) {
8    if (forceRefresh) {
9      // try to obtain new tokens if possible
10    }
11
12    const accessTokenString = '<insert JWT from provider>';
13    const idTokenString = '<insert JWT from provider>';
14    
15    return {
16      accessToken: decodeJWT(accessTokenString),
17      idToken: decodeJWT(idTokenString),
18    };
19  },
20};
21
22Amplify.configure(awsconfig, {
23  Auth: {
24    tokenProvider: myTokenProvider
25  }
26});