¿Cómo aumento el vencimiento de mi token Cognito?

How do I increase my Cognito token expiration?

Cognito uses the OAuth 2.0 Specification. In order to renew an expired token, you will need to use the Refresh Token value to get a new Id Token. To get authenticated at the start the user id and password are collected from the user and sent to Cognito. You get back two tokens.

The JWT access token is only valid for a finite period of time. Using an expired JWT will cause operations to fail. As you saw above, we are told how long a token is valid through expires_in. This value is normally 1200 seconds or 20 minutes.

Revoke a token You can revoke a refresh token using the RevokeToken API operation. You can also use the aws cognito-idp revoke-token CLI command to revoke tokens. You can also revoke tokens using the revocation endpoint. This endpoint is available after you add a domain to your user pool.

I am developing an application that uses AWS Cognito as the Identity Provider. So the user authenticate on AWS Cognito Pool and get the Access Token, Access ID and Refresh token. Then the user can make backend requests to my app. I get the Access Token validate it, get the user profile on Cognito AWS and authorize the request.

As of August 12,2020, AWS has announced that user pools now supports customization of token expiration. Here are the steps to follow: Open your AWS Cognito console. Go to General Settings. Scroll down to App clients and click edit. Access token expiration must be between 5 minutes and 1 day.

Amazon Cognito User Pools now enables customers to choose how long their access and refresh tokens should be valid. Access tokens can be configured to expire in as little as five minutes or as long as 24 hours. Refresh tokens can be configured to expire in as little as one hour or as long as ten years.

After a successful authentication, Amazon Cognito returns user pool tokens to your app. You can use the tokens to grant your users access to your own server-side resources, or to the Amazon API Gateway. Or, you can exchange them for temporary AWS credentials to access other AWS services.