Verifying Cognito access tokens - Comparing three JWT packages for Lambda authorizers

1

Node.js

This article compares three JWT packages designed for Node.js and TypeScript.

#Runtime #JavaScript Runtime #JavaScript 896 social mentions

2

JSON Web Token

The Lambda authorizer code decodes and verifies the token, and its business logic determines whether the request should proceed to the backend or be denied. Cognito access tokens are JSON Web Tokens (JWTs), and to simplify our coding, we might opt for an external package to handle token verification.

#Identity Provider #Identity And Access Management #SSO 300 social mentions

3

AWS Lambda

When the built-in Amazon API Gateway authorization methods don’t fully meet our needs, we can set up Lambda authorizers to manage the access control process. Even when using Cognito user pools and Cognito access tokens, there may still be a need for custom authorization logic.

#Cloud Hosting #Cloud Computing #Object Storage 275 social mentions

4

Amazon EC2

These packages are not limited to Lambda. You can use them to validate tokens in Express servers running on EC2 instances or containers, for example.

#Cloud Computing #Cloud Infrastructure #VPS 73 social mentions

5

Amazon API Gateway

When the built-in Amazon API Gateway authorization methods don’t fully meet our needs, we can set up Lambda authorizers to manage the access control process. Even when using Cognito user pools and Cognito access tokens, there may still be a need for custom authorization logic.

#API Tools #APIs #Web Service Automation 107 social mentions