syl20lego / insomnia-plugin-aws-cognito-token Goto Github PK

The plugin need to support HMACSHA256 secret hashes generated with the app client secret.

Thanks for this plugin. It is exactly what I've been searching for. It would be very nice if you can support the USER_SRP_AUTH flow. Currently the USER_PASSWORD_AUTH flow is fixed.

These are my settings with Insomnia 2023.4.0 on Linux

My cognito client has no secret.

When I click Install In Core on https://insomnia.rest/plugins/insomnia-plugin-aws-cognito-token and attempt adding the plugin, installation fails with this error:

Yarn error warning insomnia-plugin-aws-cognito-token > amazon-cognito-identity-js > [email protected]: This version of 'buffer' is out-of-date. You must update to v4.9.2 or newer
warning insomnia-plugin-aws-cognito-token > aws-sdk > [email protected]: This version of 'buffer' is out-of-date. You must update to v4.9.2 or newer

Attempted to install insomnia-plugin-aws-cognito-token version 0.11 into Insomnia 6.6.2. When installing from Plugins, I receive the following error:

Yarn error {"type":"warning","data":"package.json: No license field"}

No other information is available and the Plugin doesn't turn up in the list of installed.

This would be useful for testing users in different groups and changing attributes on the Cognito side. Right now we have to wait for the token to expire before it fetches a new one to pick up the server changes.

When I enter the fields as needed the plugin successfully creates a token, but then when I close the dialog Insomnia still complains about the syntax of the expression and it's not saved then. The issue seems similar to this one: Kong/insomnia#1388

I've also tried to enter the expression directly in Nunjucks power user mode, but there's still an error.

Hi!

I followed the steps in the README and I'm getting this response:

{
  "message": "Authorization header requires 'Credential' parameter. Authorization header requires 'Signature' parameter. Authorization header requires 'SignedHeaders' parameter. Authorization header requires existence of either a 'X-Amz-Date' or a 'Date' header. Authorization=eyJraWQiOiJvNkdrc1czRTRkRjdXckFwWFJPWmRQSnFGdDQ3cXNNVTFUcEhGSGxPZG9JPSIsImFsZyI6IlJTMjU2In0.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.WdJWHvosyegUWSDgkpZeloeV0BRp1_5A_Ekwl20uuHxysmvtXfRE8xwhRRHkAZk6t1WcPkXWeEw-ClmXmUEs-Pasw-_u-uMjuHqpKnlk3iyb9jyasdad27H7ILTr0GcKE8-hr43vzGbcFT9xPkU-On1YYEtnk6E8n-zld6zNxEeKbKZ-d5-VjEYg2qK28qrN3IbIqvfd0i7CVJz1NN1sygjfJCvH96_unQlOH_DLNgSXtZ4STx3C9-r_vT_f9yApNMetXsrqwgZBGMezo8F-UDR8j-O8LD4tWUvr0AVcXxEY1CDRUY93uywOdu4Pj5kzCxi_DJ8NNSSZhtUHdo2kOS2Do1A"
}

Any ideas what is happening?

I used the manual installation of the plugin using #5 (comment) .

I have doubled checked all credentials for Cognito but I keep getting an error

Unable to verify secret hash for client 56n1ij8fic######e5inkjb8nc

Screenshot:

Here my line of questions for troubleshooting

(i) Am I getting this issue because I am using https://localhost:8300 as the auth link (and probably this plugin needs extra config for localhost play, I already have added local https support using mkcert and added the callback url as https://localhost:8300 in Cognito)

(ii) Or Is it something specific to the plugin because it is manually installed instructions followed #5 (comment) .

Here are other screenshots