Created
November 5, 2019 18:14
-
-
Save ross-humphrey/de73211c99c3bf3dc6aa8a75889cca69 to your computer and use it in GitHub Desktop.
π±βπ€ Create a cognito pool for server to server authentication using Windows commands
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Windows script to set up Cognito Pool | |
# Handy guide for Server to Server credentials using Cognito @ https://lobster1234.github.io/2018/05/31/server-to-server-auth-with-amazon-cognito/ | |
# CREATE COGNITO USER POOL | |
SET POOLNAME="PoolName" | |
SET ENV="DEV" | |
aws cognito-idp create-user-pool --pool-name %POOLNAME%%ENV% | |
# MANUAL STEP (FOR NOW - COPY THE ID FROM THE OUTPUT ABOVE) | |
# Take the UserPool->Id, everything below is created from it: eu-west-1_g***** | |
# CREATE RESOURCE SERVER | |
SET ID="eu-west-*****" | |
SET RESOURCE_SERVER_NAME="resourceservername" | |
SET SCOPE_NAME_ONE="getscope" | |
SET SCOPE_NAME_TWO="postscope" | |
aws cognito-idp create-resource-server --name %RESOURCE_SERVER_NAME% --identifier %RESOURCE_SERVER_NAME% --user-pool-id %ID% --scopes ScopeName=%SCOPE_NAME_ONE%,ScopeDescription=%SCOPE_NAME_ONE% ScopeName=%SCOPE_NAME_TWO%,ScopeDescription=%SCOPE_NAME_TWO% | |
# CREATE CLIENT APP | |
SET CLIENT_APP_NAME="clientname" | |
aws cognito-idp create-user-pool-client --user-pool-id %ID% --allowed-o-auth-flows client_credentials --client-name %CLIENT_APP_NAME% --generate-secret --allowed-o-auth-scopes %RESOURCE_SERVER_NAME%/%SCOPE_NAME_ONE% %RESOURCE_SERVER_NAME%/%SCOPE_NAME_TWO% --allowed-o-auth-flows-user-pool-client | |
# ADD A DOMAIN | |
SET UNIQUE_DOMAIN_NAME="somethingunique1231515353515135" | |
aws cognito-idp create-user-pool-domain --domain %UNIQUE_DOMAIN_NAME% --user-pool-id %ID% # The Domain must be globally unique | |
# OTHER USEFUL COMMANDS | |
# DELETE RESOURCE SERVER | |
# aws cognito-idp delete-resource-server --user-pool-id %ID% --identifier %RESOURCE_SERVER_NAME% |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment