Blog

				
					cognitoUser.authenticateUser(authenticationDetails, {
        onSuccess: function() {
          console.log("User successfully authenticated");

          cognitoUser.getSession(function(err, session) {
            if (err) {
              console.log("Error: ", err);
              return;
            }
            userSession = session;
            console.log("userSession: ", userSession);
            const token = session.getIdToken().getJwtToken();
            console.log("ID token: ", token);
            // Note that this is just for demo purposes,-
            // only the ID token is used when calling API Gateway
            const accessToken = session.getAccessToken().getJwtToken();
            console.log("access token: ", accessToken);
          });

          AWS.config.region = appStore.getters.appConfiguration.region;
          const userPoolId = appStore.getters.appConfiguration.userPoolId;
          var login = {};

          var loginKey =
            "cognito-idp." + AWS.config.region + ".amazonaws.com/" + userPoolId;
          login[loginKey] = userSession.getIdToken().getJwtToken();
          console.log("login[loginKey]:", login[loginKey]);

          AWS.config.credentials = new AWS.CognitoIdentityCredentials({
            IdentityPoolId: appStore.getters.appConfiguration.identityPoolId,
            Logins: login,
          });

          // Get temporary AWS credentials for authenticated user
          // Note you can also call get() here instead of refresh()
          AWS.config.credentials.refresh((error) => {
            if (error) {
              console.error(error);
            } else {
              var principal = AWS.config.credentials.identityId;
              console.log("IdentityId: " + principal);

              // NOTE that the commented out code should be implemented in an admin script
              // on the backend. It can be triggered when an authenticated user ID
              // gets added to the identity pool.
              // It should not be implemented inside the client application.
              // console.log("Attaching principal policy");
              // new AWS.Iot().attachPrincipalPolicy(
              //   { policyName: "SensorDataPolicy", principal: principal },
              //   function(err, data) {
              //     console.log("data: ", data);
              //     if (err) {
              //       console.error(err); // an error occurred
              //     }
              //   }
              // );

              console.log("AWS.config.credentials:", AWS.config.credentials);

              console.log(
                "Configuration in store: ",
                appStore.getters.appConfiguration
              );
              appStore.dispatch("setAuthCredentials", AWS.config.credentials);
              appStore.dispatch("setAuthenticationStatus", true);
              appStore.dispatch("storeUserPool", userPool);
              appStore.dispatch("storeUserSession", userSession);

              console.log(AWS.config.credentials.accessKeyId);
              console.log(AWS.config.credentials.secretAccessKey);
              console.log(AWS.config.credentials.sessionToken);

              // Connection to IoT happens after redirection
              appRouter.push("/home");
            }
          });
        },
        onFailure: function(err) {
          console.log("Login failed");
          alert(err);
        },
        newPasswordRequired: function(userAttributes, requiredAttributes) {
          // User was signed up by an admin and must provide new
          // password and required attributes, if any, to complete
          // authentication.

          this.dialogprompt = true;

          // the api doesn't accept this field back
          delete userAttributes.email_verified;
          console.log("New password required", requiredAttributes);
          console.log("User attributes: ", userAttributes);

          // store userAttributes in global variable
          sessionUserAttributes = userAttributes;
          // TODO: needs to be implemented as a custom prompt instead
          const userPswd = window.prompt("Please enter password:");

          cognitoUser.completeNewPasswordChallenge(
            (authenticationData.Password = userPswd),
            sessionUserAttributes,
            this
          );

          console.log(
            "Completed new password challenge:",
            authenticationData.Password
          );
        },
      });