cognito_token.go

package main

import (
	"fmt"
	"log"
	"os"

	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/aws/session"
	"github.com/aws/aws-sdk-go/service/cognitoidentityprovider"
)

func main() {
	if len(os.Args) != 3 {
		log.Fatal("invalid args")
	}
	id := os.Args[1]
	password := os.Args[2]

	params := &cognitoidentityprovider.AdminInitiateAuthInput{
		AuthFlow: aws.String(cognitoidentityprovider.AuthFlowTypeAdminNoSrpAuth),
		AuthParameters: map[string]*string{
			"USERNAME": aws.String(id),
			"PASSWORD": aws.String(password),
		},
		ClientId:   aws.String(os.Getenv("CLIENT_ID")),
		UserPoolId: aws.String(os.Getenv("USER_POOL_ID")),
	}

	client := cognitoidentityprovider.New(
		session.Must(session.NewSessionWithOptions(session.Options{
			SharedConfigState: session.SharedConfigEnable,
		})),
	)

	res, err := client.AdminInitiateAuth(params)
	if err != nil {
		log.Fatal(err)
	}
	if res == nil || res.AuthenticationResult == nil || res.AuthenticationResult.IdToken == nil {
		log.Fatal("failed to login")
	}
	fmt.Println(*res.AuthenticationResult.IdToken)
}