Zakaria f4bbb6fab4 feat(cognito): hosted login page, PKCE and refresh-token grant ...

The pool's own users can now sign in through /oauth2/authorize the way apps
expect Cognito to work: without identity_provider (or with COGNITO) the
browser lands on a hosted login page, and a correct password redirects to the
registered callback with a one-time code.

- GET/POST /cognito-idp/login (and /login on custom domains), with a CSRF
  cookie and the same password rules and Pre/Post Authentication triggers as
  USER_PASSWORD_AUTH; wrong passwords, unknown and unconfirmed users get the
  same answer until the password is right
- a one-hour browser session, so the next authorize skips the form unless it
  sends prompt=login, and /logout with LogoutURLs validation
- PKCE S256 on both hosted and federated codes, and nonce in the ID token
- refresh_token grant on /oauth2/token
- codes now fire Pre Token Generation with TokenGeneration_HostedAuth instead
  of skipping the trigger

2026-10-24 11:09:37 -04:00

..

access-analyzer.md

second first commit

2026-09-22 08:57:00 -04:00

account.md

second first commit

2026-09-22 08:57:00 -04:00

acm.md

second first commit

2026-09-22 08:57:00 -04:00

amazonmq.md

second first commit

2026-09-22 08:57:00 -04:00

api-gateway.md

second first commit

2026-09-22 08:57:00 -04:00

appconfig.md

second first commit

2026-09-22 08:57:00 -04:00

appintegrations.md

second first commit

2026-09-22 08:57:00 -04:00

applicationautoscaling.md

second first commit

2026-09-22 08:57:00 -04:00

appsync.md

second first commit

2026-09-22 08:57:00 -04:00

athena.md

second first commit

2026-09-22 08:57:00 -04:00

autoscaling.md

second first commit

2026-09-22 08:57:00 -04:00

backup.md

second first commit

2026-09-22 08:57:00 -04:00

batch.md

second first commit

2026-09-22 08:57:00 -04:00

bcm-data-exports.md

second first commit

2026-09-22 08:57:00 -04:00

bcm-pricing-calculator.md

second first commit

2026-09-22 08:57:00 -04:00

bedrock-agentcore.md

second first commit

2026-09-22 08:57:00 -04:00

bedrock-runtime.md

second first commit

2026-09-22 08:57:00 -04:00

bedrock.md

second first commit

2026-09-22 08:57:00 -04:00

budgets.md

second first commit

2026-09-22 08:57:00 -04:00

ce.md

second first commit

2026-09-22 08:57:00 -04:00

cloudcontrol.md

second first commit

2026-09-22 08:57:00 -04:00

cloudformation.md

second first commit

2026-09-22 08:57:00 -04:00

cloudfront.md

second first commit

2026-09-22 08:57:00 -04:00

cloudhsmv2.md

second first commit

2026-09-22 08:57:00 -04:00

cloudmap.md

second first commit

2026-09-22 08:57:00 -04:00

cloudtrail.md

second first commit

2026-09-22 08:57:00 -04:00

cloudwatch-metric-filters-verification.md

second first commit

2026-09-22 08:57:00 -04:00

cloudwatch.md

second first commit

2026-09-22 08:57:00 -04:00

codeartifact.md

second first commit

2026-09-22 08:57:00 -04:00

codebuild.md

second first commit

2026-09-22 08:57:00 -04:00

codedeploy.md

feat: Fargate, ECS, ALB,Codebuild, CodePipeline

2026-10-02 09:54:55 -04:00

codegurureviewer.md

second first commit

2026-09-22 08:57:00 -04:00

codepipeline.md

second first commit

2026-09-22 08:57:00 -04:00

cognito.md

feat(cognito): hosted login page, PKCE and refresh-token grant

2026-10-24 11:09:37 -04:00

cognitoidentity.md

second first commit

2026-09-22 08:57:00 -04:00

comprehend.md

second first commit

2026-09-22 08:57:00 -04:00

config.md

second first commit

2026-09-22 08:57:00 -04:00

connect.md

second first commit

2026-09-22 08:57:00 -04:00

controlcatalog.md

second first commit

2026-09-22 08:57:00 -04:00

controltower.md

second first commit

2026-09-22 08:57:00 -04:00

cur.md

second first commit

2026-09-22 08:57:00 -04:00

datasync.md

second first commit

2026-09-22 08:57:00 -04:00

detective.md

second first commit

2026-09-22 08:57:00 -04:00

dms.md

second first commit

2026-09-22 08:57:00 -04:00

docdb.md

second first commit

2026-09-22 08:57:00 -04:00

dynamodb.md

second first commit

2026-09-22 08:57:00 -04:00

ec2.md

bug fixes: backend services patches - Implemented and deployed systemd-backed AMIs

2026-10-07 13:22:32 -04:00

ecr.md

second first commit

2026-09-22 08:57:00 -04:00

ecs.md

second first commit

2026-09-22 08:57:00 -04:00

efs.md

second first commit

2026-09-22 08:57:00 -04:00

eks.md

second first commit

2026-09-22 08:57:00 -04:00

elastic-beanstalk.md

second first commit

2026-09-22 08:57:00 -04:00

elasticache.md

second first commit

2026-09-22 08:57:00 -04:00

elb-classic.md

second first commit

2026-09-22 08:57:00 -04:00

elb.md

backend services patching

2026-09-30 17:46:10 -04:00

emr-serverless.md

second first commit

2026-09-22 08:57:00 -04:00

emr.md

second first commit

2026-09-22 08:57:00 -04:00

eventbridge.md

second first commit

2026-09-22 08:57:00 -04:00

firehose.md

second first commit

2026-09-22 08:57:00 -04:00

fis.md

second first commit

2026-09-22 08:57:00 -04:00

globalaccelerator.md

second first commit

2026-09-22 08:57:00 -04:00

glue.md

second first commit

2026-09-22 08:57:00 -04:00

guardduty.md

second first commit

2026-09-22 08:57:00 -04:00

iam.md

second first commit

2026-09-22 08:57:00 -04:00

identitystore.md

second first commit

2026-09-22 08:57:00 -04:00

index.md

bug fixes: backend services patches - Implemented and deployed systemd-backed AMIs

2026-10-07 13:22:32 -04:00

inspector2.md

second first commit

2026-09-22 08:57:00 -04:00

iot.md

second first commit

2026-09-22 08:57:00 -04:00

kafka-connect.md

bug fixes: backend services patches - Implemented and deployed systemd-backed AMIs

2026-10-07 13:22:32 -04:00

kinesis.md

bug fixes: backend services patches - Implemented and deployed systemd-backed AMIs

2026-10-07 13:22:32 -04:00

kinesisanalytics.md

second first commit

2026-09-22 08:57:00 -04:00

kms.md

second first commit

2026-09-22 08:57:00 -04:00

lakeformation.md

second first commit

2026-09-22 08:57:00 -04:00

lambda-microvms.md

second first commit

2026-09-22 08:57:00 -04:00

lambda.md

second first commit

2026-09-22 08:57:00 -04:00

lightsail.md

feat: Lightsail + svg animation + ec2 bug fixes

2026-10-11 14:19:49 -04:00

macie2.md

second first commit

2026-09-22 08:57:00 -04:00

managed-prometheus.md

second first commit

2026-09-22 08:57:00 -04:00

marketplace.md

second first commit

2026-09-22 08:57:00 -04:00

memorydb.md

second first commit

2026-09-22 08:57:00 -04:00

msk.md

second first commit

2026-09-22 08:57:00 -04:00

mwaa.md

second first commit

2026-09-22 08:57:00 -04:00

neptune.md

second first commit

2026-09-22 08:57:00 -04:00

network-firewall.md

second first commit

2026-09-22 08:57:00 -04:00

oam.md

second first commit

2026-09-22 08:57:00 -04:00

opensearch.md

second first commit

2026-09-22 08:57:00 -04:00

organizations.md

second first commit

2026-09-22 08:57:00 -04:00

pipes.md

second first commit

2026-09-22 08:57:00 -04:00

pricing.md

second first commit

2026-09-22 08:57:00 -04:00

ram.md

second first commit

2026-09-22 08:57:00 -04:00

rds-data.md

second first commit

2026-09-22 08:57:00 -04:00

rds.md

second first commit

2026-09-22 08:57:00 -04:00

redshift-data.md

second first commit

2026-09-22 08:57:00 -04:00

redshift.md

second first commit

2026-09-22 08:57:00 -04:00

rekognition.md

second first commit

2026-09-22 08:57:00 -04:00

resource-explorer.md

second first commit

2026-09-22 08:57:00 -04:00

resource-groups-tagging.md

second first commit

2026-09-22 08:57:00 -04:00

route53.md

second first commit

2026-09-22 08:57:00 -04:00

route53resolver.md

second first commit

2026-09-22 08:57:00 -04:00

rum.md

second first commit

2026-09-22 08:57:00 -04:00

s3.md

backend services patching

2026-09-30 17:46:10 -04:00

s3tables.md

second first commit

2026-09-22 08:57:00 -04:00

s3vectors.md

second first commit

2026-09-22 08:57:00 -04:00

sagemaker.md

second first commit

2026-09-22 08:57:00 -04:00

scheduler.md

second first commit

2026-09-22 08:57:00 -04:00

secrets-manager.md

second first commit

2026-09-22 08:57:00 -04:00

securityhub.md

second first commit

2026-09-22 08:57:00 -04:00

service-catalog.md

second first commit

2026-09-22 08:57:00 -04:00

servicequotas.md

second first commit

2026-09-22 08:57:00 -04:00

ses.md

second first commit

2026-09-22 08:57:00 -04:00

sns.md

second first commit

2026-09-22 08:57:00 -04:00

sqs.md

second first commit

2026-09-22 08:57:00 -04:00

ssm.md

second first commit

2026-09-22 08:57:00 -04:00

ssoadmin.md

second first commit

2026-09-22 08:57:00 -04:00

ssooidc.md

second first commit

2026-09-22 08:57:00 -04:00

ssoportal.md

second first commit

2026-09-22 08:57:00 -04:00

step-functions.md

feat: paginate step functions executions

2026-09-27 23:35:21 -04:00

sts.md

second first commit

2026-09-22 08:57:00 -04:00

swf.md

second first commit

2026-09-22 08:57:00 -04:00

textract.md

second first commit

2026-09-22 08:57:00 -04:00

timestream-influxdb.md

second first commit

2026-09-22 08:57:00 -04:00

transcribe.md

second first commit

2026-09-22 08:57:00 -04:00

transfer.md

second first commit

2026-09-22 08:57:00 -04:00

translate.md

second first commit

2026-09-22 08:57:00 -04:00

verifiedpermissions.md

second first commit

2026-09-22 08:57:00 -04:00

wafv2.md

second first commit

2026-09-22 08:57:00 -04:00