Aws-sdk-go: Add similar Cognito customizations as AWS SDK for Javascript

[alwindoss]

Please fill out the sections below to help us address your issue.

Version of AWS SDK for Go?

LATEST

Version of Go (go version)?

1.8.1

Support for Cognito just the way it is supported in JavaScript SDK and Android SDK to calculate the Auth Challenge to send in RespondToAuthChallenge

[xibz]

Hello @alwindoss, thank you for reaching out to us. I am not familiar with how those SDKs deal with auth challege. Can you elaborate on what exactly it is that is wanted?

[alwindoss]

Hello @xibz

What I was referring to is that there is no easy way to respond to an auth challenge. Given the user pool details and the client ID client secret along with what is required I should be able to call respond to auth challenge.
But, today I have to calculate the key and the secret hash that needs to be returned and it becomes tedious.
I am not a JavaScript developer, but I only heard from one that this process is simple in JavaScript since ask handles most of it.

[alwindoss]

@xbiz
I need to calculate the following to RespondToAuthChallenge and I have no clue how to do it. This ideally should be provided by the SDK right?

• PASSWORD_CLAIM_SIGNATURE

• SECRET_HASH

[xibz]

@alwindoss - It looks like the functionality you are referring to is part of the service team's SDK which is built on top of the AWS SDK for JavaScript. I will keep this as a feature request, and I completely agree that this should be in the SDK as a higher level function to help users get these values.

[alwindoss]

@xibz in the meanwhile could you point me to a documentation that tells me how to calculate these things to respondtoauthchallenge

This would help me unblock myself.

[xibz]

@alwindoss - The best place to see how these values are calculated is to look at this SDK. This feature is undocumented and private. Meaning that this is not guaranteed to be stable and can be subject to change. Since the algorithms do not pertain to this SDK, it may be a good idea to reach out to the service team's forums. They should be able to better help you in getting the specifics of the algorithms.

Stackoverflow discussion

[xibz]

@alwindoss - It looks there is documentation for the SECRET_HASH value. Please let us know if that helps!

[alwindoss]

Link: http://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-cognito-user-pools.html
Under the section "install the SDK" it's clearly mentioned the act of sign in is made easy in higher level SDKs. 3 are listed:

• Android
• Javascript
• iOS

Why can't we have this support in golang SDK as well.

[xibz]

@alwindoss - The AWS SDK for JavaScript is different then the one that's listed there. I imagine this is true for mobile as well. The service team maintains those specific SDKs. The best course of action is to reach out to the forums here. I've also forwarded this request to the service team.

[dowlingw]

Full support for the "Custom" (read: default) Cognito authentication flow would be good too:
http://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html#amazon-cognito-user-pools-admin-authentication-flow

Let me know if that should be a separate issue, however this is another piece of functionality covered by the Android/JS/iOS SDKs that would be nice to see expanded out.

opencoff/go-srp seems to be the only SRP implementation in go, but the API seems to contradict the flow as described in the RFC. Not sure on the policy for introducing dependencies into this library anyway, but figured it's worth mentioning for anyone looking at an implementation.

[alwindoss]

@xibz does the service team track your request? Could you share with me the details about this request?

[mrichman]

Does anyone know where I can find a Cognito example for Go? I'm looking to implement signup and authentication for a web app I'm writing in Go.

[jasdel]

Hi @mrichman I don't know of any example off hand. The best reference I can find is on using Amazon Cognito User Pools at a higher level cross language. The examples that are written for Javascript, Android, and IOS may be useful to use as a reference implementation. The aws-sdk-go does not have the customizations implemented like the other SDKs mentioned above.

[mrichman]

Thanks @jasdel

[alwindoss]

@xibz any updates on this feature from the services team?

[xibz]

@alwindoss - We don't track individual service team features. The best way to get at this information is through their forums. I will ping the service team to let them know there is more demand for this feature.

[alwindoss]

Can't we have this part of as this repository itself, instead of waiting on the service team to provide this feature how about the community contribute this feature. I am ready to pick this up, if someone can help me with the direction i need to go.

[george-e-shaw-iv]

This might be a service-level request in terms of cogntio, but I really think there needs to be some way (or maybe there is and I just don't know about it/can't find it) to implement social identity providers into server side authentication using AWS.

Whether that be using the tokens that they return from oauth2 or through some other means, it would definitely be nice to have.

[alwindoss]

AWS has released a developer preview for this feature in .Net
https://aws.amazon.com/blogs/developer/cognitoauthentication-extension-library-developer-preview/

I think it is time even Go developers have similar ease when working with Cognito.