AWS认知:带有认知-标识池的无效登录令牌错误

Question

我试图理解aws认知-用户名池和认知-标识池的身份验证流程。在试图调用aws认知标识get-id命令时，我碰到了一个错误，如下所示：

我能够成功地使用认知idp进行身份验证。

> aws cognito-idp initiate-auth --client-id 8ik2s2uk8d9ekh7k3s1hstlgt --auth-flow USER_PASSWORD_AUTH --auth-parameters USERNAME=testuser@xxx.com,PASSWORD=Pxxx1 --profile dev1

{
    "ChallengeParameters": {},
    "AuthenticationResult": {
        "AccessToken": "eyJraWQi..OiJSUzI1NiJ9.eyJvcmln...MOssACEgAsP-..A",
        "ExpiresIn": 3600,
        "TokenType": "Bearer",
        "RefreshToken": "eyJj...IuxVj4Vv3EykM1ItEZkpSA",
        "IdToken": "e..QCw"
    }
}

在试图生成一个认知ID之后，请看到一个错误。

aws cognito-identity get-id --identity-pool-id us-west-2:7exxx27-fxx4-4xxb-bc7c-1107c054e6de --login IdToken=eyJ.....Q3g4TDQ9IiwiYWxnIjoiUlMy

An error occurred (NotAuthorizedException) when calling the GetId operation: Invalid login token. Issuer doesn't match providerName

我的最终目标是获得调用aws认知标识的临时凭据，获取身份凭据。不过，这又犯了一个错误。

> aws cognito-identity get-credentials-for-identity --identity-id "us-west-2:7ee6b627-f894-4b3b-bc7c-1107c054e6de" --profile dev1 --region us-west-2.
An error occurred (ResourceNotFoundException) when calling the GetCredentialsForIdentity operation: Identity 'us-west-2:7ee6b627-f894-4b3b-bc7c-1107c054e6de' not found.

不知道如何在这里取得进展，任何帮助都将不胜感激。

Answer 1

好吧，我意识到我做错了什么。能够完成完整的流程工作。

1. 发起身份验证(认知-idp)

~> aws认知-idp启动-auth\-客户端-id 8ik2sxxxh7k3k1hstlgt\-auth- USER_PASSWORD_AUTH \-auth参数USERNAME=bxxxur@wxxxxxx.com，PASSWORD=Pxxx1 --配置文件dev1 { "ChallengeParameters"：{}，"AuthenticationResult"：{ "AccessToken"："whYhsUITzQQ3eBXAwI6VX7Gi7Dmv2eP3T1w"，"ExpiresIn"：3600，"TokenType"："Bearer"，"RefreshToken"：TokenType"IdToken"：“Ngf2ZbCZZ-FJwY-7 ptPGpKMdA7NjYVX8hM7DA”}

1. 获取认知池ID

us-west-2:7ee6b627-f894-4b3b-bc7c-1107c054e6de \-登录%~> -idp.us-west-2.amazonaws.com/us-west-west-2_BLcbQ9DHK=eyJraWQiOiJlMF.....Z20mCsfhv4RHy0GSdJxLvZkZ- w10Gloz8cApb71QrvxY2vPvqq0klDvWzeA {"IdentityId"：IdentityId }

1. 获得身份凭据

身份认证-id us-west-2:bbc7f768-1a17-4c02-8f48-56d2e84c3947 \-登录~> -idp.us-west-2.amazonaws.com/us-west- 2_BLcbQ9DHK=eyJraWQ......sj5bOd3hu824g -配置文件dev1 {“"us-west-2:bbc7f768-1a17-4c02-8f48-56d2e84c3947"，”：IdentityId“凭证”：{ "AccessKeyId"："AS....O57QPE"，"SecretKey"："f....CJsfDV5Y2jW"，"SessionToken":"IQWvwc.......BDXm+5khWB5m/NWYUbf7leZ/Sk2f2y4Le"，“呼气”：1641857034.0 }