OIDC With Cognito and FastAPI

Local execution

Install poetry and Python 3.12 on your machine. Make sure poetry is available on your PATH.
In a terminal inside this directory, execute poetry install.
Execute poetry run python -m app.main to start a local server.

Cognito setup

Make sure you have a working AWS Cognito User Pool available.
Pass the configuration values as specified in example.env to a .env file in the root directory.

Testing

The easiest way to test the device flow is through the Swagger UI Docs.
Start up your server and go to http://localhost:5050/docs
Authenticate using your Cognito client id and secret.

Device flow

Execute Get Device Token
Copy and paste the verification URI in your browser
Click confirm and authenticate
Now the Get Jwt Token call will succeed.