Example usage for com.amazonaws.services.cognitoidp.model AdminInitiateAuthResult getSession

Introduction

In this page you can find the example usage for com.amazonaws.services.cognitoidp.model AdminInitiateAuthResult getSession.

Prototype

public String getSession() 

Source Link

Document

The session which should be passed both ways in challenge-response calls to the service.

Usage

From source file:com.kdgregory.example.cognito.servlets.ConfirmSignUp.java

License:Apache License

@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response)
        throws ServletException, IOException {
    String emailAddress = request.getParameter(Constants.RequestParameters.EMAIL);
    String tempPassword = request.getParameter(Constants.RequestParameters.TEMPORARY_PASSWORD);
    String finalPassword = request.getParameter(Constants.RequestParameters.PASSWORD);
    if (StringUtil.isBlank(emailAddress) || StringUtil.isBlank(tempPassword)
            || StringUtil.isBlank(finalPassword)) {
        reportResult(response, Constants.ResponseMessages.INVALID_REQUEST);
        return;/*from   w  w  w . ja v  a 2 s .  c  om*/
    }

    logger.debug("confirming signup of user {}", emailAddress);

    try {
        // must attempt signin with temporary password in order to establish session for password change
        // (even though it's documented as not required)

        Map<String, String> initialParams = new HashMap<String, String>();
        initialParams.put("USERNAME", emailAddress);
        initialParams.put("PASSWORD", tempPassword);

        AdminInitiateAuthRequest initialRequest = new AdminInitiateAuthRequest()
                .withAuthFlow(AuthFlowType.ADMIN_NO_SRP_AUTH).withAuthParameters(initialParams)
                .withClientId(cognitoClientId()).withUserPoolId(cognitoPoolId());

        AdminInitiateAuthResult initialResponse = cognitoClient.adminInitiateAuth(initialRequest);
        if (!ChallengeNameType.NEW_PASSWORD_REQUIRED.name().equals(initialResponse.getChallengeName())) {
            throw new RuntimeException("unexpected challenge: " + initialResponse.getChallengeName());
        }

        Map<String, String> challengeResponses = new HashMap<String, String>();
        challengeResponses.put("USERNAME", emailAddress);
        challengeResponses.put("PASSWORD", tempPassword);
        challengeResponses.put("NEW_PASSWORD", finalPassword);

        AdminRespondToAuthChallengeRequest finalRequest = new AdminRespondToAuthChallengeRequest()
                .withChallengeName(ChallengeNameType.NEW_PASSWORD_REQUIRED)
                .withChallengeResponses(challengeResponses).withClientId(cognitoClientId())
                .withUserPoolId(cognitoPoolId()).withSession(initialResponse.getSession());

        AdminRespondToAuthChallengeResult challengeResponse = cognitoClient
                .adminRespondToAuthChallenge(finalRequest);
        if (StringUtil.isBlank(challengeResponse.getChallengeName())) {
            updateCredentialCookies(response, challengeResponse.getAuthenticationResult());
            reportResult(response, Constants.ResponseMessages.LOGGED_IN);
        } else {
            throw new RuntimeException("unexpected challenge: " + challengeResponse.getChallengeName());
        }
    } catch (InvalidPasswordException ex) {
        logger.debug("{} submitted invalid password", emailAddress);
        reportResult(response, Constants.ResponseMessages.INVALID_PASSWORD);
    } catch (UserNotFoundException ex) {
        logger.debug("not found: {}", emailAddress);
        reportResult(response, Constants.ResponseMessages.NO_SUCH_USER);
    } catch (NotAuthorizedException ex) {
        logger.debug("invalid credentials: {}", emailAddress);
        reportResult(response, Constants.ResponseMessages.NO_SUCH_USER);
    } catch (TooManyRequestsException ex) {
        logger.warn("caught TooManyRequestsException, delaying then retrying");
        ThreadUtil.sleepQuietly(250);
        doPost(request, response);
    }
}

---