Add Cognito for authentication #57
Conversation
nickclyde
requested review from
marycrawford,
rin-skylight and
DanPaseltiner
There was a problem hiding this comment.
Very exciting to have auth enable. I know this turned into a long slog. I have two questions.
-
Could we add some documentation for how an engineer could generate a bearer token to include with a request from their local to avoid the sign in screen? I'm thinking about demos from Postman/Insomnia on folks' locals.
-
As continue to build out some UI components for DIBBs we will likely need to give access to CDC stakeholders and potential pilot participants to let them play around to experience the product we are building. Is there a way we could generate some creds that could be shared to allow access? Obviously this is NOT what we would do on production instance. I was just in a call with some stakeholders yesterday where they asked if we could get the FHIR client @m-goggins and I built at the connectathon hosted for publicly for others to be able to play and see what we built.
PULL REQUEST
Summary
Adds Cognito so that our endpoints are protected by an authentication check.
Related Issue
Fixes #1311
Depends on #55
Depends on #67