Strapi-plugin-sso-aws-cognito-basic NPM

Strapi plugin sso-aws-cognito-basic

This is a basic plugin using Amazon Cognito for Single Sign On (SSO). The configurations are controlled by environment variables inside .env file.

How it works

Normally you get the token to authenticate and authorize your app to access Amazon services. Can I use it to authorize Strapi services? Yes by using Cognito token to authenticate a user in Strapi. The idea is to map AWS Cognito roles with the Strapi roles. If the role match then the user will be authenticated and it will return Strapi generated JWT token as if the user logs in. This works even if the user is not yet created. If authenticated and the role match the user will be created automatically. If the user already exist, the user information will be updated. This way you can use it to authorize AWS services at the same time authorize your own Strapi services by either using the Strapi token or the Cognito token.

To authenticate, use the returned token as parameter. After authenticated, it will still use the Strapi jwt token since you are just accessing its internal APIs.

This will work both for admin and API users.

For API users, in the client pass the ssoToken (token returned after logging in to Cognito) to /verifyTokenAPIUser endpoint.

Supported Strapi versions:

Strapi v3.6.x and above

Installation

npm install strapi-plugin-sso-aws-cognito-basic --save

yarn add strapi-plugin-sso-aws-cognito-basic

Copy required files

Inside plugin strapi-files copy admin to admin/ project root directory and copy hooks.js to Strapi config. Also copy the hooks folder to the Strapi root directory. If the folders already exist, only copy the files or code that are missing.