API Connect

 View Only
Expand all | Collapse all

How to integrate AWS Cognito as third party Oauth provider in IBM API Connect.

  • 1.  How to integrate AWS Cognito as third party Oauth provider in IBM API Connect.

    Posted Wed September 14, 2022 07:59 AM
    Not able to find/get Introspect url from cognito
    As we need  three urls to add an OAuth in API Connect i.e Authorization url, Token and introspect url but however introspect url is not provided by aws cognito. So how can we integrate cognito with APIC?
    If anyone has some steps to do so kindly share it.
    Even if there is any other method or documentation regarding the connection of APIC with cognito please provide it.

    ------------------------------
    Ashwin Iyer
    ------------------------------


  • 2.  RE: How to integrate AWS Cognito as third party Oauth provider in IBM API Connect.

    Posted Thu September 15, 2022 04:36 AM
    Edited by Jayprakash Yadav Thu September 15, 2022 04:39 AM
    As of now AWS Cognito does not provide token introspection endpoint, still you can download the jwk signature from AWS Cognito, and develop a api on your apigw to verify jwt. Same API Url you can then add it in token introspection url.

    You can use below documentation to create introspection API URL yourself on APIGW.
    https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html

    Regards,
    Jay Yadav.

    ------------------------------
    Jayprakash Yadav
    ------------------------------