Authentication with Amazon Cognito and Application Load Balancer

[faermanj]

Hello,

I've been working on integrating our quarkus applications with Amazon Cognito User Pools with Federated Identities (Google at first) and Application Load Balancers.

So far, I have written my own application that manages generating the correct request for the token exchange process.

What I'd like to discuss and understand is:

• Is there an extension, or configuration reference, for Amazon Cognito?
• Should it be something specific or generic OAUTH / OIDC support should handle it?

Documentation References:

User pool sign-in with third party identity providers
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html

Authenticate users using an Application Load Balancer
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html

Thanks!

[sberyozkin]

@faermanj Hi, I'd expect quarkus-oidc be able to handle it, please experiment.