Getting credentials with CognitoIdentityCredentials with the SDK?

[brunoksato]

I found in javascript: http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CognitoIdentityCredentials.html
plus how to do this go ?

thanks

[jasdel]

Hi @brunoksato thanks for contacting us. At the moment the Go SDK does not provide the helper the JS SDK has. I've marked this as a feature request, as it would be good for the SDK to provide a helper to retrieve Cognito Identity Credentials.

To do this now your self in Go you could use the following API calls. This is the same thing the JS SDK does but wrapped in a credentials provider.

If credentials are to be accessed with just an "IdentityPoolId"

svc := cognitoidentity.New(nil)
idRes, err := svc.GetId(&cognitoidentity.GetIdInput{
    /*input params*/
})

credRes, err := svc.GetCredentialsForIdentity(&cognitoidentity.GetCredentialsForIdentity{
    /*input params*/
})
// credRes.Credentials  contains the AWS credentials

If credentials are to be accessed with both an "RoleArn" and "IdentityPoolId"

svc := cognitoidentity.New(nil)
tokenRes, err := svc.GetOpenIdToken(cognitoidentity.GetOpenIdTokenInput{
    /*input params*/
})

stsSvc := sts.New(nil)
roleRes, err := stsSvc.AssumeRoleWithWebIdentity(&sts.AssumeRoleWithWebIdentityInput{
    /*input params*/
})
// roleRes.Credentials contains the AWS credentials

[brunoksato]

@jasdel Thanks for the fast reply !

thanks for the tips, I'll try to apply here

but AssumeRoleWithWebIdentity not have in documentation right ?

what params AssumeRoleWithWebIdentity ?

the first validation generate token with GetOpenIdTokenForDeveloperIdentity

how to validate this token again ?

[jasdel]

The documentation for AssumeRoleWithIdentity can found on the SDK's API documentation.

You should be able to use GetOpenIdTokenForDeveloperIdentity to regenerate the token and provide that token to STS's AssumeRoleWithWebIdentity. The API doc link above will help you with which params are needed in your case.

[brunoksato]

Hi @jasdel have problem in AssumeRoleWithIdentity, generate token public but I do not know validate this token in all request api

which api user to validate the token is still valid ?

[brunoksato]

resolved