Integrating Google Login with Cognito & API Gateway

Question

I am looking to integrate Google Login (not the Google+ one provided by Cognito, I don't want to require users to be Google+ users) with Cognito & API Gateway.

Am I on the right track?

I have added account.google.com to Cognito's Federated Identities pool

After login:

AWS.config.region = "ap-northeast-2"
AWS.config.credentials = new AWS.CognitoIdentityCredentials({
    IdentityPoolId: 'ap-northeast-2:31cc246c-bd2e-46ee-91da-2b8eefcf0745',
    Logins: {
      "accounts.google.com": googleUser.getAuthResponse().id_token
    }
})

Am I on the right track so far? But with this alone I do not have a cognito token?

I think I need to follow one of the flows from the docs. But which?

Do I just use Enchanced (Simplified)? And call GetId & GetCredentialsForIdentity? But do I even need GetId. I think I just need a token?

Any examples or guidance? I don't want to just bruteforce whatever works but not understand whats the use case of each flow ... can someone help explain?

Integrating Google Login with Cognito & API Gateway

1 Answers