4.2.2 Using user pools with Bayun AWSS3 wrapper 'SecureAuthentication'

Here are the details about registering, confirming, and authenticating users using AWSS3 wrapper. User Registration, SignUp Confirmation, SignIn, SignOut needs to be done with SecureAuthentication instance.

Creating an AWSCognitoIdentityUserPool Object

The following procedure describes how to create an AWSCognitoIdentityUserPool object to interact with.

1. Set up your service config

There is no change in setting up Service Config and is same as using standard AWS Mobile SDK.

Objective-C

AWSServiceConfiguration *serviceConfiguration = [[AWSServiceConfiguration alloc] initWithRegion:AWSRegionUSEast1 credentialsProvider:nil];

Swift

let serviceConfiguration : AWSServiceConfiguration = AWSServiceConfiguration(region: .USEast1, credentialsProvider: nil)

2. Create a user pool configuration.

There is no change in creating user pool configuration and is same as using standard AWS Mobile SDK.

Objective-C

//create a pool
AWSCognitoIdentityUserPoolConfiguration *configuration = [[AWSCognitoIdentityUserPoolConfiguration alloc] initWithClientId:@"CLIENT_ID" clientSecret:@"CLIENT_SECRET" poolId:@"USER_POOL_ID"];

[AWSCognitoIdentityUserPool registerCognitoIdentityUserPoolWithConfiguration:serviceConfiguration userPoolConfiguration:configuration forKey:@"UserPool"];

AWSCognitoIdentityUserPool *pool = [AWSCognitoIdentityUserPool CognitoIdentityUserPoolForKey:@"UserPool"];

Swift

let configuration : AWSCognitoIdentityUserPoolConfiguration = AWSCognitoIdentityUserPoolConfiguration(clientId: "CLIENT_ID", clientSecret: "CLIENT_SECRET", poolId: "USER_POOL_ID")
        
AWSCognitoIdentityUserPool.register(with: serviceConfiguration, userPoolConfiguration: configuration, forKey: "UserPool")
        
let pool : AWSCognitoIdentityUserPool = AWSCognitoIdentityUserPool(forKey: "UserPool")

Register a User

Use SecureAuthentication's signUp:username:password:userAttributes:userAttributes:validationData:withBlock: method to register a new user instead of relying on standard AWS Mobile SDK's signUp method.

Objective-C

AWSCognitoIdentityUserAttributeType * email = [AWSCognitoIdentityUserAttributeType new];
email.name = @"email";
email.value = @"[e-mail]";   

AWSCognitoIdentityUserPool *pool = [AWSCognitoIdentityUserPool CognitoIdentityUserPoolForKey:@"UserPool"];
BOOL registerBayunWithPwd = true;
//sign up the user    
[[SecureAuthentication sharedInstance] signUp:pool username:@"username" password:@"password" userAttributes:@[email] validationData:nil registerBayunWithPwd:registerBayunWithPwd withBlock:^id_Nullable(AWSTask<AWSCognitoIdentityUserPoolSignUpResponse *> * _Nonnull task) {
                                             
dispatch_async(dispatch_get_main_queue(), ^{                                                
   if(task.error){
    [[[UIAlertView alloc] initWithTitle:task.error.userInfo[@"__type"]
                                        message:task.error.userInfo[@"message"]
                                       delegate:self
                              cancelButtonTitle:@"Ok"
                              otherButtonTitles:nil] show];
    } else {
        AWSCognitoIdentityUserPoolSignUpResponse * response = task.result;
        if(!response.userConfirmed){
            // handle the case where user has to confirm his identity
        }
    }});
    return nil;                                                                                    
}];  

Swift

let pool : AWSCognitoIdentityUserPool = AWSCognitoIdentityUserPool(forKey: "UserPool")
        
let email = AWSCognitoIdentityUserAttributeType()
email?.name = "email"
email?.value = "[e-mail]"

let registerBayunWithPwd = true
        
SecureAuthentication.sharedInstance().signUp(pool, username: "username", password: "password", userAttributes: [email!], validationData: nil, registerBayunWithPwd: registerBayunWithPwd){ (task) -> Any? in
    DispatchQueue.main.async(execute: {
        if let error = task.error as? NSError {
            let alertController = UIAlertController(title: error.userInfo["__type"] as? String,
                                                            message: error.userInfo["message"] as? String,
                                                            preferredStyle: .alert)
            let retryAction = UIAlertAction(title: "Retry", style: .default, handler: nil)
            alertController.addAction(retryAction)
            self?.present(alertController, animated: true, completion:  nil)
        } else if let result = task.result  {
            if (result.user.confirmedStatus != AWSCognitoIdentityUserStatus.confirmed) {
                // handle the case where user has to confirm his identity
            }
        }
    })
}

Confirm Signup

Confirm a users' sign up with the confirmation code using SecureAuthentication's confirmSignUpForUser:confirmationCode:forceAliasCreation:withBlock: method.

Objective-C

AWSCognitoIdentityUserPool *pool = [AWSCognitoIdentityUserPool CognitoIdentityUserPoolForKey:@"UserPool"];
AWSCognitoIdentityUser *user = [pool getUser:@"username"];
[[SecureAuthentication sharedInstance] confirmSignUpForUser:user confirmationCode:"code" forceAliasCreation:YES withBlock:^id _Nullable(AWSTask<AWSCognitoIdentityUserConfirmSignUpResponse *> * _Nonnull task) {
       
 if(task.error){
    [[[UIAlertView alloc] initWithTitle:task.error.userInfo[@"__type"]
                                message:task.error.userInfo[@"message"]
                               delegate:nil
                      cancelButtonTitle:@"Ok"
                      otherButtonTitles:nil] show];
 } else {
    //return to signin screen
    [self.navigationController popToRootViewControllerAnimated:YES];
 }
 return nil;
}];

Swift

let pool : AWSCognitoIdentityUserPool = AWSCognitoIdentityUserPool(forKey: "UserPool")
let user : AWSCognitoIdentityUser = pool.getUser("username")
SecureAuthentication.sharedInstance().confirmSignUp(for: user, confirmationCode: "code", forceAliasCreation: true) { (task) -> Any? in
DispatchQueue.main.async(execute: {
    if let error = task.error as? NSError {
        let alertController = UIAlertController(title: error.userInfo["__type"] as? String,
                                              message: error.userInfo["message"] as? String,
                                       preferredStyle: .alert)
        let okAction = UIAlertAction(title: "Ok", style: .default, handler: nil)
        alertController.addAction(okAction)
            
        self.present(alertController, animated: true, completion:  nil)
    } else {
        let _ = strongSelf.navigationController?.popToRootViewController(animated: true)
    }
})

Sign in a User

Use SecureAuthentication's signInPool:username:password:withBlock: method to get a session username and password.

Objective-C

AWSCognitoIdentityUserPool *pool = [AWSCognitoIdentityUserPool CognitoIdentityUserPoolForKey:@"UserPool"];
   
[[SecureAuthentication sharedInstance] signInPool:pool username:@"username" password:@"password" withBlock:^id _Nullable(AWSTask<AWSCognitoIdentityUserSession*> * _Nonnull task) {
    dispatch_async(dispatch_get_main_queue(), ^{
        NSError *error = task.error;
        if(error){
            [[[UIAlertView alloc] initWithTitle:error.userInfo[@"__type"]
                                        message:error.userInfo[@"message"]
                                       delegate:nil
                              cancelButtonTitle:nil
                              otherButtonTitles:@"Retry", nil] show];
        } else {
           //signIn successful
        }
    });
    return nil;
}];

Swift

SecureAuthentication.sharedInstance().sign(in: pool, username: "username", password: "password", with: { (task) -> Any? in
    DispatchQueue.main.async(execute: {
        if let error = task.error as? NSError {
            let alertController = UIAlertController(title: error.userInfo["__type"] as? String,
                                                  message: error.userInfo["message"] as? String,
                                           preferredStyle: .alert)
            let okAction = UIAlertAction(title: "Ok", style: .default, handler: nil)
            alertController.addAction(okAction)
            self.present(alertController, animated: true, completion: nil)
        } else {
            //signIn successful
        }
    })
})

Signout a user

Use SecureAuthentication's signout method to clear all tokens.

Objective-C

[[SecureAuthentication sharedInstance] signout:user];

Swift

SecureAuthentication.sharedInstance().signout(user)