I have a website that is completely front-end with no back-end server. I’m trying to implement OAuth2 in it through AWS Cognito and some identity providers like Google.
My question is, are there any out-of-the-box AWS Cognito features that let me exchange the authorization code I got from Google with an access token? Do you think I should implement that myself using AWS Lambda functions and API Gateways?
I got it working using a frontend page with the authorization code as a query parameter, but I don’t like it this way because that code is being exposed in the browser.
Mumen Tayyem is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.