http4k-connect-amazon-cognito-fake/org.http4k.connect.amazon.cognito.oauth/CognitoPoolClientValidator

CognitoPoolClientValidator

class CognitoPoolClientValidator(storage: Storage<CognitoPool>) : ClientValidator

Constructors

Link copied to clipboard
constructor(storage: Storage<CognitoPool>)

Functions

Link copied to clipboard
open override fun validateClientId(request: Request, clientId: ClientId): Boolean
Link copied to clipboard
open override fun validateCredentials(request: Request, clientId: ClientId, clientSecret: String): Boolean

We are non-strict here - we only check the secret if there was one generated. This will differ from real cognito (which would reject if an attempt was made to auth with a client with no secret)

Link copied to clipboard
open override fun validateRedirection(request: Request, clientId: ClientId, redirectionUri: Uri): Boolean
Link copied to clipboard
open override fun validateScopes(request: Request, clientId: ClientId, scopes: List<String>): Boolean