java正在验证应用程序,Amazon Cognito开发人员使用Java SDK验证身份

I am trying to authenticate a java app to AWS services using a developer-authenticated Cognito identity. This is very straightforward in the AWS mobile SDKs (documentation), but I can't seem to find the equivalent classes in the Java SDK.

The main issue I am having is that the Java SDK classes (such as WebIdentityFederationSessionCredentialsProvider) require the client code to know the arn of the role being assumed. With the mobile SDK, it uses the role configured for the federated identity. That's what I'd prefer to do, but it seems the Java SDK doesn't have the supporting classes for that.

解决方案

The last comment from Jeff led me to the answer. Thanks Jeff!

String cognitoIdentityId = "your user's identity id";

String openIdToken = "open id token for the user created on backend";

Map logins = new HashMap<>();

logins.put("cognito-identity.amazonaws.com", openIdToken);

GetCredentialsForIdentityRequest getCredentialsRequest =

new GetCredentialsForIdentityRequest()

.withIdentityId(cognitoIdentityId)

.withLogins(logins);

AmazonCognitoIdentityClient cognitoIdentityClient = new AmazonCognitoIdentityClient();

GetCredentialsForIdentityResult getCredentialsResult = cognitoIdentityClient.getCredentialsForIdentity(getCredentialsRequest);

Credentials credentials = getCredentialsResult.getCredentials();

AWSSessionCredentials sessionCredentials = new BasicSessionCredentials(

credentials.getAccessKeyId(),

credentials.getSecretKey(),

credentials.getSessionToken()

);

AmazonS3Client s3Client = new AmazonS3Client(sessionCredentials);

...