A link is identified like the following - https://huge-logistics.auth.us-east-1.amazoncognito.com/login?client_id=16f1g98bfuj9i0g3f8be36kkrl&response_type=code&scope=https%3A%2F%2Fapi.huge-logistics.com%2Fstatus+openid&redirect_uri=https%3A%2F%2Fhuge-logistics.com

This link notes that it is part of the Amazon Cognito service, and has a client_id of 16f1g98bfuj9i0g3f8be36kkrl .

Running aws cognito-idp sign-up --client-id <client id> --username <user name> --password <password> --region <region> results in the following:

image.png

Can also use aws cognito-idp sign-up --client-id <client id> --username <new user> --password <password> --user-attributes Name="email",Value="<email>" Name="name",Value="<new user>" to create a new user, where an email may be required as well for verification purposes, as is the case above.

image.png

image.png

Running aws cognito-idp confirm-sign-up --client-id <client id> --username <username> --confirmation-code <code> --region <region> results in no output, but should confirm the sign up. It is now possible to obtain a JWT for the account.

aws cognito-idp initiate-auth --client-id <client id> --auth-flow USER_PASSWORD_AUTH --auth-parameters USERNAME=<user name>,PASSWORD=<password> --region <region>

image.png

Decoding the IdToken provides us with the User Pool unique identifier

image.png

Running aws cognito-identity get-id --identity-pool-id "<identity pool id>" --logins "{ \\"<User Pool Identifier from JSON ID Token>\\": \\"<ID Token>\\" }" --region <region> gets the unique Cognito ID for the information in context.

image.png