Request for an example of token refresh after timeout in SPA? about cloudfront-authorization-at-edge

[ottokruse]

Hi @rpattcorner isn't this what you mean?

cloudfront-authorization-at-edge/src/cfn-custom-resources/react-app/src/App.js

Lines 43 to 44 in 97788d8

	// Schedule check and refresh (when needed) of JWT's every 5 min:
	const i = setInterval(() => Auth.currentSession(), 5 * 60 * 1000);

[rpattcorner]

Thanks, Otto ... it is. But I don't believe we're using the Amplify framework, which I think the example relies on, so I was searching for raw Cognito examples.

[ottokruse]

Ah ok. But raw HTTP REST call to Cognito you mean? That would be a call to https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html with AuthFlow set to "REFRESH_TOKEN_AUTH"

Amplify is gonna be way easier. Amplify is a big framework but you can just use the Auth portion of it.

[rpattcorner]

Nope, nothing that arcane. Just old-style calls using the javascript Cognito API that existed before Amplify. I think Amplify is a better idea too, but I'm out of developer resources so no resources for a new framework :(

[rpattcorner]

This sort of thing:

cognitoUser.refreshSession(refreshToken, (err, result)

[ottokruse]

That should do it!

https://github.com/aws-amplify/amplify-js/blob/d308e6e510bd61102cc0a4a14198cd0d0d18cc5f/packages/amazon-cognito-identity-js/src/CognitoUser.js#L1436

[rpattcorner]

Many thanks We're using (and currently testing) an approach from this stack overflow that might do the trick.

However in doing so we have tried to speed the testing by using the new cognito feature to set token timeouts to something shorter than an hour. And we're seeing fails with auth@edge. That's a completely separate proposition and I'll open an issue for it.