Introduce Amazon Cognito OAuth2.0 authentication

[joshika39]

Hey there!

I want to implement the support for Amazon Cognito OAuth2.0.

They have a proper OAuth2.0 flow implemented, when you use Cognito as an IDP:

• https://aws.amazon.com/blogs/security/how-to-use-oauth-2-0-in-amazon-cognito-learn-about-the-different-oauth-2-0-grants/
• https://docs.aws.amazon.com/cognito/latest/developerguide/authentication.html

[rmmayo]

Hello @joshika39 - we are not very familiar with Amazon Cognito, but you are welcome to submit a PR for consideration.

You may or may not be aware, but SkillTree already supports some OAuth 2.0 providers. Please see: https://skilltreeplatform.dev/dashboard/install-guide/config.html#oauth-support-pass-auth-mode-only

It's possible you may only need to implement an OAuth2UserConverter for Amazon Cognito, please see: https://github.com/NationalSecurityAgency/skills-service/blob/master/service/src/main/java/skills/auth/form/oauth2/OAuth2UserConverterService.groovy

Lastly, please adhere to our contribution guidelines: https://skilltreeplatform.dev/contribution/

Good luck!

[joshika39]

Thanks! I saw the source code already, found where to put what, and am looking into what tests I have to write.

Also, I saw, that you support both Hydra and Keycloack in the source code, which you do not mention in the docs. Is that intentional?

Thanks!

[rmmayo]

Hydra is only used for testing, so that was intentionally left out of the docs.

It does look like leaving out keycloak was an oversight. You are welcome to test out keycloak and contribute to the docs if you would like. Thanks!