AWS Cognito - JavaScript中的开发者身份验证(浏览器)

var params = {
    IdentityId: $.cookie('cognito_identityId'),
    Logins: {
      "myauth": $.cookie('oauth.io_token')
    }
};
var cognitoidentity = new AWS.CognitoIdentity({apiVersion: '2014-06-30'});
cognitoidentity.getCredentialsForIdentity(params, function(err, data) {
  if (err) {
    console.log(err, err.stack); // an error occurred
  }
  else {
    console.log(data);           // successful response
  }
});

AWS.config.credentials = new AWS.WebIdentityCredentials({
    RoleArn: 'arn:aws:iam::xxxxxxxx:role/Cognito_xxxxxxxxxxAuth_Role',
    WebIdentityToken: $.cookie('cognito_token')
});

问题:

• 我做错了什么?

• 正确的使用方法是什么?

谢谢。

谢谢你的好意。

我采纳了你的建议，但没有改变。

错误消息。

POST https://cognito-identity.us-east-1.amazonaws.com/ 400 (Bad Request)
POST https://cognito-identity.us-east-1.amazonaws.com/ 400 (Bad Request)
Error: Missing required key 'IdentityId' in params
    at fail (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:2163:37)
    at validateStructure (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:2084:14)
    at validateMember (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:2110:21)
    at validate (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:2059:10)
    at Request.VALIDATE_PARAMETERS (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:800:32)
    at Request.callListeners (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:3913:20)
    at callNextListener (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:3903:12)
    at chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:787:9
    at finish (chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:126:7)
    at chrome-extension://hmjdjbikinkmjbilihjibcihbkbjdgjf/bower_components/aws-sdk-js/dist/aws-sdk.js:142:9

下面有源代码链接。

和服务器端是一个AWS Lambda Function。

var aws = require('aws-sdk');
aws.config.region = 'us-east-1';
var cognitoidentity = new aws.CognitoIdentity();
var identityPoolId = 'us-east-1:0dccff0d-5fd7-4d14-b38f-d27204feaecc';
console.log('Loading function');
exports.handler = function(event, context) {
    console.log('token: %s', event.token);
    var params = {
        IdentityPoolId: identityPoolId,
        Logins: {
            'oauth.io': event.token
        }
    };
    cognitoidentity.getOpenIdTokenForDeveloperIdentity(params,function(err,data){
        if(err){
            console.log(err);
            context.fail('Something went wrong');
        }else{
            context.succeed(data);
        }
    });
};

这个程序是Google-Chrome-Extension.

• AWS Lambda函数通过getOpenIdTokenForDeveloperIdentity返回令牌。
• app/scripts/pop .js调用Lambda Function并设置cookie。
• app/scripts/background.js调用AWS.config.credentials。

我用错了吗?

更新附加信息

感谢您提供的额外信息。

在background.js的第104行出现错误

AWS.config.credentials.get(function(){

and 115 line on background.js

      dataset.synchronize(

，我的解释是不够的。Facebook身份验证需要域(例如。http://example.com)。但是，Google-Chrome-Ext没有域名。它有一个域'chrome-extension://xxxxxxxxxxxxxxxx '。然后，我使用https://oauth.io。它代理任何身份验证并接受chrome扩展域。

Popup.js通过oauth进行Facebook身份验证。io sdk。它获得一个facebook令牌，并给出getOpenIdTokenForDeveloperIdentity。我认为facebook token.substr(0,14)是唯一的。但是，如果它是错误的，我使用另一个唯一标识符(例如。电子邮件地址)

对不起，我错了。AWS.config.credentials.get给出错误:

Error: Invalid login token.

,数据集。同步显示此错误:

Error: Missing required key 'IdentityId' in params