Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What's the difference between /authorize and /login endpoints in AWS Cognito User Pools

From AWS docs,

AUTHORIZATION Endpoint The /oauth2/authorize endpoint signs the user in.

GET /oauth2/authorize The /oauth2/authorize endpoint only supports HTTPS GET. The user pool client typically makes this request through the system browser, which would typically be Custom Chrome Tab in Android and Safari View Control in iOS.

LOGIN Endpoint The /login endpoint signs the user in. It loads the login page and presents the authentication options configured for the client to the user.

GET /login The /login endpoint only supports HTTPS GET. The user pool client makes this request through the system browser, which would typically be Custom Chrome Tabs in Android and Safari View Controller in iOS.

Both endpoints redirect after success, which one to use when?

like image 854
Technoshaft Avatar asked Jun 01 '18 13:06

Technoshaft


People also ask

What is authorize endpoint?

The authorize endpoint can be used to request tokens or authorization codes via the browser. This process typically involves authentication of the end-user and optionally consent. Note. IdentityServer supports a subset of the OpenID Connect and OAuth 2.0 authorize request parameters.

Can AWS Cognito be used for authorization?

You can use Amazon Cognito to control permissions for different user groups in your app. This ensures that users have appropriate access to backend resources, determined by the group they belong to. Amazon Cognito makes it easier for you to manage user identities, authentication, and permissions.

What are the two main components of Amazon Cognito?

The two main components of Amazon Cognito are user pools and identity pools. User pools are user directories that provide sign-up and sign-in options for your app users. Identity pools enable you to grant your users access to other AWS services. You can use identity pools and user pools separately or together.


1 Answers

The difference I noticed is if you have only one identity provider enabled the /authorize route will skip the hosted UI. The identity provider must be a Federation one for this to work. If the identity provider is Cognito you'll still be redirected to the hosted UI to type your password.

like image 93
Hugodby Avatar answered Oct 26 '22 14:10

Hugodby