Passing a federated identity into AWSAppSyncClient?

Here’s what im trying to do essentially in React.

1. User logs in via a login mutation with appsync and is returned an identityId and JWT token from the response.

const cognitoCredentials = new AWS.CognitoIdentityCredentials({
  IdentityPoolId: 'IdentityPool goes here',
  IdentityId: 'IdentityId here',
  Logins: {
     'cognito-identity.amazonaws.com': 'JWT Token here'
  }
});

1. I pass the credentials with the users identityId And JWT token to Appsync to authenticate them…

const client = new AWSAppSyncClient({
  url: appSyncConfig.graphqlEndpoint,
  region: appSyncConfig.region,
  auth: {
    type: AUTH_TYPE.AWS_IAM,
    credentials: cognitoCredentials
  }
});

My question is… is this the approach I should be taking or is there an easier way of doing this? I don’t want to use user pools because it will end up being too expensive for me; so i’m going the federated identity approach. I will create a user…and save them as a federated identity using their database user id.

Sorry if this is the wrong section, but maybe someone knows!

[honkskillet]

@lolcoolkat How do you get your custom headers from the client you lambdas. I am using IAM auth and lambdas and AppSync doesn’t seem to pass along headers (unless I am doing it wrong which is very possible).

[russelltaga]

Got it, apologies for any confusion!