1-Setup.md

ASP.NET Core Identity Provider for Amazon Cognito

Getting familiar with the AWS SDK for .NET and the AWS Toolkit for Visual Studio

This library is built on top of the AWS SDK for .NET to communicate with Amazon Cognito. We recommend installing the AWS Toolkit for Visual Studio and creating a default profile to manage your Access Keys and Secret Keys.

You can find more information on the AWS SDK for .NET on the AWS Guide for .NET Developers.

Try-out the sample web application

You can quickly try the library out by cloning and exploring the sample web application from the GitHub repository.

Just make the necessary changes to the following properties to the appsettings.Development.json file to use the web application with your Cognito User Pool:

"AWS": {
    "Region": "<your region id goes here>",
    "UserPoolClientId": "<your user pool client id goes here>",
    "UserPoolClientSecret": "<your user pool client secret goes here>",
    "UserPoolId": "<your user pool id goes here>"
}

Upgrading an existing web application

Simply add the following NuGet dependencies to your ASP.NET Core application:

• Amazon.AspNetCore.Identity.Cognito
• Amazon.Extensions.CognitoAuthentication

Adding Amazon Cognito as an Identity Provider

To add Amazon Cognito as an Identity Provider, make the following change to your code:

Startup.cs:

public void ConfigureServices(IServiceCollection services)
{
    // Adds Amazon Cognito as Identity Provider
    services.AddCognitoIdentity();
    ...
}

public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    // If not already enabled, you will need to enable ASP.NET Core authentication
    app.UseAuthentication();
    ...
}

In order to automatically inject Cognito service and user pool clients make the following changes to your appsettings.Development.json:

"AWS": {
    "Region": "<your region id goes here>",
    "UserPoolId": "<your user pool id goes here>",
    "UserPoolClientId": "<your user pool client id goes here>",
    "UserPoolClientSecret": "<your user pool client secret goes here>"
}

Alternatively, instead of relying on a configuration file, you can inject your own instances of IAmazonCognitoIdentityProvider and CognitoUserPool in your Startup.cs file, or use the newly announced AWS Systems Manager to store your web application parameters.

public void ConfigureServices(IServiceCollection services)
{
    ...
    // Adds your own instance of Amazon Cognito clients 
    // cognitoIdentityProvider and cognitoUserPool are variables you would have instanciated yourself
    services.AddSingleton<IAmazonCognitoIdentityProvider>(cognitoIdentityProvider);
    services.AddSingleton<CognitoUserPool>(cognitoUserPool);

    // Adds Amazon Cognito as Identity Provider
    services.AddCognitoIdentity();
    ...
}

Using the CognitoUser class as your web application user class

Once Amazon Cognito is added as the default ASP.NET Core Identity Provider, you need to use the newly introduced CognitoUser class instead of the default ApplicationUser class.

These changes will be required in existing Razor views and controllers. Here is an example with a Razor view:

@using Microsoft.AspNetCore.Identity
@using Amazon.Extensions.CognitoAuthentication

@inject SignInManager<CognitoUser> SignInManager
@inject UserManager<CognitoUser> UserManager