Aws-sdk-js: CognitoIdentityCredentials params Logins key for sign In with Apple ID?

[ryaa]

Confirm by changing [ ] to [x] below:

• [X] I've gone though Developer Guide and API reference
• [X] I've checked AWS Forums and StackOverflow for answers

Describe the question

What value should be used for the Logins property of the parameters required to intialize the Cognito Credentials object (CognitoIdentityCredentials) if I need to support social login for Apple ID.

AWS documentation only lists the below keys

• Facebook: graph.facebook.com
• Google: accounts.google.com
• Amazon: www.amazon.com
• Twitter: api.twitter.com
• Digits: www.digits.com

See https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_CreateIdentityPool.html#API_CreateIdentityPool and https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CognitoIdentity.html

I can't find what should be used for Apple ID anywhere in the AWS documentation and the aws-sdk typescript does not list it as well - see below

    /**
     * A set of optional name-value pairs that map provider names to provider tokens. The available provider names for Logins are as follows:   Facebook: graph.facebook.com    Amazon Cognito user pool: cognito-idp.<region>.amazonaws.com/<YOUR_USER_POOL_ID>, for example, cognito-idp.us-east-1.amazonaws.com/us-east-1_123456789.    Google: accounts.google.com    Amazon: www.amazon.com    Twitter: api.twitter.com    Digits: www.digits.com   
     */
    Logins?: LoginsMap;

My code as below (see WHAT SHOULD BE INSERTED HERE TO SUPPORT APPLE ID SOCIAL LOGIN placeholder)

        // The parameters required to intialize the Cognito Credentials object.
        const params = {
          AccountId: awsConfig.AWS_ACCOUNT_ID,
          RoleArn: awsConfig.IAM_ROLE_ARN,
          IdentityPoolId: awsConfig.COGNITO_IDENTITY_POOL_ID,
          Logins: { }
        };

        params.Logins[<WHAT SHOULD BE INSERTED HERE TO SUPPORT APPLE ID SOCIAL LOGIN>] = accessToken;
        // set the Amazon Cognito region
        AWS.config.region = awsConfig.AWS_REGION;
        // initialize the Credentials object with our parameters
        AWS.config.credentials = new AWS.CognitoIdentityCredentials(params);

        (AWS.config.credentials as AWS.CognitoIdentityCredentials).get((err: AWSError) => {
          if (err) {
            reject(err);
          }
          else {
            const COGNITO_IDENTITY_ID = (AWS.config.credentials as AWS.CognitoIdentityCredentials).identityId;
            awsConfig.COGNITO_IDENTITY_ID = COGNITO_IDENTITY_ID;
            this.share.cognitoIdentityId = COGNITO_IDENTITY_ID;
            resolve();
          }
        });

[ajredniwja]

Hey @ryaa, thank-you for reaching out to us with your issue.

As you mentioned that Apple is not mentioned for logins here LoginProviders that is because it is not a supported key for LoginProvider yet.

I am gonna mark this as a feature request for the service team. Will reach out to them internally with the request to implement the feature as well.

[ryaa]

@ajredniwja Thank you very much for a quick feedback

What is interesting is that when I picked some guessed value 'www.apple.com' just to try I’m getting _Invalid login token. Issuer doesn't match providerName_ error which looks like this is not wrong and not supported.
But when I tried 'appleid.apple.com' as suggested at SO (https://stackoverflow.com/questions/59649484/cognitoidentitycredentials-params-logins-key-for-sign-in-with-apple-id) I got _Token is not from a supported provider of this identity pool_ which looks like this is supported but AWS Cognito is not properly configured yet.

[ajredniwja]

@ryaa I believe that is still because it still has only a set number of accepted values. I read about a third party library which you can use on SO but since it is not from AWS I wont be able to comment on how to use that.

[ryaa]

@ajredniwja Any estimate when the appropriate key will be supported for Login Provider?

[bgrynblat]

I am facing the same issue, any chance this could be implemented since Sign in Apple is available on Cognito ? Thanks 🙏🙏🙏

[christopherib]

Having same issue as @bgrynblat

[falcon4ever]

@ajredniwja Any updates on this? I'm running into the same problem.

Sign in with Apple is required for iOS apps (Supporting other login methods like Facebook and Google sign-ins) by April 30, 2020, else you won't be able to submit new builds for review. ( https://developer.apple.com/news/?id=09122019b / https://developer.apple.com/news/?id=03042020d )

[YuliyaKarima]

@falcon4ever I've just managed to solve this problem by trying one thing: just typed app identifier instead of services id in Apple tab on Authentication providers of Identity Pool. After that Apple id Token has been accepted by AWS.

[ajredniwja]

@ryaa @falcon4ever were you able to use the workaround provided by @YuliyaKarima?

[ryaa]

were you able to use the workaround provided by @YuliyaKarima?

yes. It worked.

[ajredniwja]

Will close this issue now, please reach out if you have any other questions.