Update on support for OIDC with Amazon Cognito?

[faermanj]

Is there any guide or reference on configuring Amazon Cognito as OIDC provider for Quarkus?

[sberyozkin]

@faermanj I haven't tested it, but AFAIK, some users did. It should be configured like any other OIDC provider. If the bearer access tokens have to be checked then the address alone should be enough to discover the keys. For the code flow, the client id, secret, application type=web-app

[faermanj]

@AdamBien would you have an example of OIDC with Cognito? I believe you mentioned it's Cognito is non-standard in some ways but I don't recall exactly.

[sberyozkin]

@faermanj Are you seeing any specific issues with it ?

As far as I recall, the problem was related to verifying Amazon ALB tokens, where the JWKS retrieval endpoint was dynamically detected. That already works with smallrye-jwt. However I'm not sure what is the exact relationship between Cognito and ALB.

[faermanj]

Not yet, just checking before I do something stupid :)
I will setup a small demo with only the cognito infrastructure and a "quarkus create app + oidc", let's see how it goes.