Overview

The Authentication Service uses AWS Cognito to handle user authentication and authorization. The service is used by the other services in PAL to authenticate and authorize users. The service will generate JWT

that can be used for authentication and authorization.

The adapter consists of Eventhandler and an API. The API handles both Authentication as well as management of users. The service is involved in the creation process of a User, but only for verification of the User not the actual creation of the user.

Cognito has been extened to use a DynamoDB table for handling Users and other things. The User is always created in Cognito. But the id (Sub of the user) is used as a key in the DynamoDB table. This makes it possible to quickly find additional data in a separate table. It is also faster to search the DynamoDB table to find users than quering Cognito.

Event Source

pal.auth

High Level

Swagger

Either use the specification in the side bar, but that may not be completly updated, for the most recent visit the Swagger page for your project.