如何使用Amazon Cognito注销终端节点? [英] How to use Amazon Cognito Logout endpoint?

问题描述

我在应用程序中使用AWS Cognito.

I am using AWS Cognito in my application.

在注销时，我呼叫注销端点.

但是在注销后，我仍然能够使用旧的刷新令牌生成id令牌.

But after doing logout, I am still able to generate the id-tokens using the old refresh token.

这意味着我的注销端点不再起作用.我将令牌保存在本地存储中，并且在注销时会手动清除存储.

It means my logout endpoint is not working any more. I am saving the tokens in my local storage, And while doing the logout i am clearing the store manually.

我的问题是:如何正确使用AWS的注销机制 认识吗?

My Question is: How to properly use the logout mechanism of AWS Cognito?

推荐答案

我不确定您使用的是哪个框架，但我使用的是Angular.不幸的是，使用AWS Cognito的方式多种多样，文档尚不清楚.这是我对Authentication Service的实现(使用Angular):

I'm not sure which framework you are using, but I'm using Angular. Unfortunately there are different ways of using AWS Cognito and the documentation is not clear. Here is my implementation of the Authentication Service (using Angular):

-注1-使用此登录方法-将用户重定向到注销网址后-本地主机会自动刷新并删除令牌.

-注2-您也可以通过以下方式手动进行操作:this.userPool.getCurrentUser().signOut()

import { Injectable } from '@angular/core'
import { CognitoUserPool, ICognitoUserPoolData, CognitoUser } from 'amazon-cognito-identity-js'
import { CognitoAuth } from 'amazon-cognito-auth-js'
import { Router } from '@angular/router'

const COGNITO_CONFIGS: ICognitoUserPoolData = {
  UserPoolId: '{INSERT YOUR USER POOL ID}',
  ClientId: '{INSERT YOUR CLIENT ID}',
}

@Injectable()
export class CognitoService {

  userPool: CognitoUserPool
  constructor(
    private router: Router
  ) {
    this.createAuth()
  }

  createAuth(): void {
    // Configuration for Auth instance.
    const  authData = {
      UserPoolId: COGNITO_CONFIGS.UserPoolId,
      ClientId: COGNITO_CONFIGS.ClientId,
      RedirectUriSignIn : '{INSERT YOUR COGNITO REDIRECT URI}',
      RedirectUriSignOut : '{INSERT YOUR COGNITO SIGNOUT URI}',
      AppWebDomain : '{INSERT YOUR AMAZON COGNITO DOMAIN}',
      TokenScopesArray: ['email']
    }

    const  auth: CognitoAuth = new CognitoAuth(authData)
    // Callbacks, you must declare, but can be empty.
    auth.userhandler = {
      onSuccess: function(result) {
      },
      onFailure: function(err) {
      }
    }

    // Provide the url and parseCognitoWebResponse handles parsing it for us.
    const curUrl = window.location.href
    auth.parseCognitoWebResponse(curUrl)
  }

  /**
   * Check's if the user is authenticated - used by the Guard.
   */
  authenticated(): CognitoUser | null {
    this.userPool = new CognitoUserPool(COGNITO_CONFIGS)
    // behind the scene getCurrentUser looks for the user on the local storage.
    return this.userPool.getCurrentUser()
  }

  logout(): void {
    this.router.navigate(['/logout'])
  }

}

这篇关于如何使用Amazon Cognito注销终端节点?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！