POC Cognito - Natura

API Platform
client_id: 0abf3607-db34-310f-8ab3-31fab087d817
client_secret: 00198fd8-0a1c-3686-a064-3385a95f9e3e

https://dev.apigw.natura.com.br/poc-cognito/v1


Cognito
URL de Login: https://app01.auth.us-east-1.amazoncognito.com/login?client_id=5bgq4636p5bsi0f4bb4l6c5lnj&response_type=code&scope=aws.cognito.signin.user.admin+email+http://app01.poc.com.br/read+http://app01.poc.com.br/write+openid+profile&redirect_uri=https://dev.apigw.natura.com.br/poc-cognito/v1/signin

usuario: flavio.pimenta@gmail.com
senha: Sensedia@2020

You shouldn't set the 'redirect_uri' to Cognito's Login Endpoint. It makes no sense. The 'redirect_uri' is a parameter to tell Cognito where to take the user after login, which would be your application's url.

The 'redirect_uri' should be exactly match of one of the Callback URIs for the app client you configured for security reasons, otherwise you will get a' redirect_mismatch' error.

To access the login endpoint:

https://mydomain.auth.us-east-1.amazoncognito.com/login?response_type=code&client_id=CLIENT_ID&redirect_uri=REDIRECT_URI
For the authorize endpoint:

https://mydomain.auth.us-east-1.amazoncognito.com/oauth2/authorize?response_type=code&client_id=CLIENT_ID&redirect_uri=REDIRECT_URI
The authorize endpoint firsts checks to see if you have a session cookie indicating that you're already logged in, and if you are, it automatically redirects you to the redirect_uri, otherwise it will take you to the login page via the Login Endpoint with the query strings provided to the authorize endpoint.