Getting a 403 forbidden once I've attached a userp...
# help
t
Getting a 403 forbidden once I've attached a userpool authorizer to the API. I'm included the
Bearer
header - do I need to be granting permission to the pool to call the api?
Figured it out, I was using the default scopes form the docs
user.id
and
user.email
but the token on the frontend only has
aws.cognito.signin.user.admin
f
Which library r u using on the frontend for handling the auth?
t
aws-cognito-identity-js which is what amplify uses underneath
Cognito is the most I've been confused with serverless since I began 😅