4 ms·
"I had a “Dear AWS” section since I’ve received multiple bug reports on it when used with my OAuth client library. However, I couldn’t recreate any of the repor
by weinzierl 2y ago
"I had a “Dear AWS” section since I’ve received multiple bug reports on it when used with my OAuth client library. However, I couldn’t recreate any of the reported issues so I have removed it from the post."
I wish the section would have been kept. I don't care about AWS but I think this article is an excellent checklist for common pitfalls. So keeping them, even if one provider has fixed them would still be useful.
- suzzer99 2y agoOne big issue with AWS OIDC is that API Gateway uses the id_token to validate requests, not the access_token as the spec requires. Unless you're doing subscriptions through AppSync, then it does require the access_token, not the id_token. But their own amplify library doesn't realize this, so you have to trick it. Fun stuff to implement on the front end.
- mdaniel 2y agohttps://github.com/pilcrowonpaper/pilcrow/commit/29b105e9c1255772648c81eb87e9f056e3802bde https://github.com/pilcrowonpaper/pilcrow/commit/29b105e9c12... "remove aws"