从Angular 5中的AWS Cognito刷新JWT令牌？

Question

我通过aws sdk cognito .net sdk在亚马逊认知中创建用户.当用户登录时,他们会返回3个令牌(IdToken,AccessToken和RefreshToken).IdToken有效期为1小时.目前,当令牌过期时,用户被重定向到登录页面.我想要做的是在收到403返回时发送RefreshToken,但我不确定如何在角度应用程序中执行此操作？

我也假设这是我在客户端而不是在服务器端(.net web api)处理的东西？

我目前在我的路线上有警卫从我的服务中调用以下功能:

 loggedIn() {
    return tokenNotExpired('token');
  }

以下工作,但问题是我必须使用我AccessKey和SecretKey:

refreshToken(){

    AWS.config.update({credentials:{accessKeyId:'access_id',secretAccessKey:'secret'}, region:'us-east-2'});

    const myCreds = new AWS.CognitoIdentityCredentials({IdentityPoolId:'us-east-2:identity_pool_id},{region:'us-east-2'});

   const myConfig = new AWS.Config({credentials: myCreds, region: 'us-east-2'});



   const refreshToken = JSON.parse(localStorage.getItem('rToken'));
    const cognitoisp = new CognitoIdentityServiceProvider();

    const params = {
      AuthFlow: 'REFRESH_TOKEN',
      ClientId: 'client_id',
      UserPoolId: 'user_pool_id',
      AuthParameters: {
        'REFRESH_TOKEN': refreshToken
      }
    }

    cognitoisp.adminInitiateAuth(params,(err,data)=>{
      if(err) console.log(err,err.stack);

      else

      {
        this.token = data.AuthenticationResult.IdToken;
        localStorage.setItem('lcToken',JSON.stringify(this.token));
      }

    })
  }

Answer 1

你有正确的想法,一旦你获得4xx状态,你可以使用刷新令牌来获得一组新的令牌.JavaScript中的代码如下:

const AWS = require('aws-sdk')
const cognitoisp = new AWS.CognitoIdentityServiceProvider();

var params = {
  AuthFlow: 'REFRESH_TOKEN',
  ClientId: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxx',
  UserPoolId: 'region_xxxxxxxx',
  AuthParameters: {
    'REFRESH_TOKEN': 'xxxxxxxxxxxxxxxxxxxxx'
  }
}

cognitoisp.adminInitiateAuth(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

DOCS:https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CognitoIdentityServiceProvider.html#adminInitiateAuth-property