passkeys-amazon-cognito

KO | EN

gitlite — search

#react #ai #go #android #machine-learning #rust #macos #nodejs #awesome #awesome-list #security #pytorch #mcp #open-source

passkeys-amazon-cognito

(★ 86)

Sample project that shows how to integrate passkeys into your existing password-based Amazon Cognito project.

File Explorer

Download Latest Version (.zip)

- - startup.sh
- - authCognitoController.ts
  - authCorbadoController.ts
- - constants.ts
  - helper.ts
- app.ts
- Dockerfile
- package.json
- tsconfig.app.json
- tsconfig.json
- - favicon.ico
  - index.html
  - main.ts
  - styles.scss
- .editorconfig
- .gitignore
- angular.json
- Dockerfile
- package.json
- README.md
- tsconfig.app.json
- tsconfig.json
- tsconfig.spec.json
.env.example
.gitignore
docker-compose.yml
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<br />
<div align="center">
  <h3 align="center">Passkeys integration into Amazon Cognito</h3>

<p align="center">
    Sample project that shows how to integrate passkeys into your existing password-based Amazon Cognito project.
    <br />
    <br />
    <a href="https://passkeys.eu">View passkeys demo</a>
    ·
    <a href="https://github.com/corbado/passkeys-amazon-cognito/issues">Report Bug</a>
    ·
    <a href="https://github.com/corbado/passkeys-amazon-cognito/issues">Request Feature</a>
  </p>
</div>

## Overview

Passkeys are the new standard for authentication on the web. Currently, they're being rolled out by Apple, Google and Microsoft. Though, not many code
sample projects exist, and even less for integrating them into existing authentication and user management systems. We provide a guide that shows how to easily add
passkeys into your existing Amazon Cognito project.

For this sample, we leverage [Corbado](https://www.corbado.com)'s passkey-first web components that let you integrate it in <1 hour, while still keeping Amazon Cognito as core user management system.

Find a detailed step-by-step tutorial [here](https://www.corbado.com/blog/passkeys-amazon-cognito).

### Built With

The sample project uses Angular as web frontend framework and Node.js / Express in the backend (both in TypeScript).

* [![Angular][Angular.io]][Angular-url]
* [![Node.js][Nodejs.org]][Nodejs-url]
* [![Express][Expressjs.com]][Express-url]

## Getting Started

We provide a docker file for quickly getting started. Note that you need to enter Amazon Cognito and Corbado environment variables to get things working (see `docker-compose.yml`).

To start project without locally without Docker, you need to run the [Corbado CLI](https://docs.corbado.com/helpful-guides/corbado-cli). Besides, you may also need to copy the AWS CLI credentials from `.aws/credentials`:

```
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=

COGNITO_REGION=
COGNITO_USER_POOL_ID=
COGNITO_CLIENT_ID=
COGNITO_CLIENT_SECRET=
COGNITO_JWKS=

CORBADO_PROJECT_ID=
CORBADO_API_SECRET=
CORBADO_CLI_SECRET=
CORBADO_WEBHOOK_USERNAME=
CORBADO_WEBHOOK_PASSWORD=
```

Start the docker containers with:

```
docker compose up
```

## Integration

Please see [this link](https://www.corbado.com/blog/passkeys-amazon-cognito) for a detailed step-by-step tutorial on how to integrate passkeys into Amazon Cognito.

### Sign-up flow
The following steps provide a high-level overview what happens during the passkey sign-up flow.

1. Sign-up via Corbado web component on Angular frontend
2. Sign-up handled by Corbado backend (existing users are checked via webhooks)
4. Redirect to `/api/corbado/authTokenValidate` on Node.js / Express backend with `corbadoAuthToken`
5. API call to Corbado backend to verify `corbadoAuthToken` (API returns `email`)
6. API calls to create the user in Amazon Cognito
    1. AdminCreateUser (`email`=`email` returned from previous step, `email_verified`=`true`, `custom:createdByCorbado`=`true`)
    2. AdminSetUserPassword (`Username`=`email`, `Password`=`randomPassword`)
7. API calls to create session in Amazon Cognito
    1. AdminInitiateAuthCommand (`AuthFlow`=`CUSTOM_AUTH`, `USERNAME`=`email` returned from previous step, no password)
    2. AWS Lambda functions are executed
        1. `Define auth challenge`: Cognito invokes this trigger to initiate the custom auth flow
        2. `Create auth challenge`: Cognito invokes this trigger after `Define auth challenge` to create custom challenge
        3. `Verify auth challenge response`: Cognito invokes this trigger to verify response from user for custom challenge
    3. RespondToAuthChallenge
8. Amazon Cognito returns JWTs (`idToken`, `accessToken`, `refreshToken`)
9. `accessToken` "saved in Angular"
10. Logged-in page in Angular verifies `accessToken` in JavaScript

### Login flow
The following steps provide a high-level overview what happens during the passkey login flow.

1. Login via Corbado web component on Angular frontend
2. Login handled by Corbado backend (existing users are checked via webhooks)
3. Redirect to `/api/corbado/authTokenValidate` on Node.js / Express backend with `corbadoAuthToken`
4. API call to Corbado backend to verify `corbadoAuthToken` (API returns `email`)
5. API calls to create session in Amazon Cognito
    1. AdminInitiateAuthCommand (`AuthFlow`=`CUSTOM_AUTH`, `USERNAME`=`email` returned from previous step, no password)
    2. AWS Lambda functions are executed
        1. `Define auth challenge`: Cognito invokes this trigger to initiate the custom auth flow
        2. `Create auth challenge`: Cognito invokes this trigger after `Define auth challenge` to create custom challenge
        3. `Verify auth challenge response`: Cognito invokes this trigger to verify response from user for custom challenge
    3. RespondToAuthChallenge
6. Amazon Cognito returns JWTs (`idToken`, `accessToken`, `refreshToken`)
7. `accessToken` "saved in Angular"
8. Logged-in page in Angular verifies `accessToken` in JavaScript

## Contact

Vincent Delitz - [@vdelitz](https://twitter.com/vdelitz) - vincent@corbado.com

Project link: [https://github.com/corbado/passkeys-amazon-cognito](https://github.com/corbado/passkeys-amazon-cognito)

Tutorial link: [https://www.corbado.com/blog/passkeys-amazon-cognito](https://www.corbado.com/blog/passkeys-amazon-cognito)

[product-screenshot]: images/screenshot.png
[Angular.io]: https://img.shields.io/badge/Angular-DD0031?style=for-the-badge&logo=angular&logoColor=white
[Angular-url]: https://angular.io/

[Nodejs-url]: https://nodejs.org/
[Nodejs.org]: https://img.shields.io/badge/Node.js-339933?style=for-the-badge&logo=node.js&logoColor=white

[Express-url]: https://expressjs.com/
[Expressjs.com]: https://img.shields.io/badge/Express-AEAEAE?style=for-the-badge&logo=express&logoColor=white

passkeys-amazon-cognito

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

passkeys-amazon-cognito

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README