AWS Cognito如何安全地保留未经身份验证的用户的identityId?

时间:2018-09-21 00:37:44

标签: amazon-cognito

使用Cognito,我可以获得代表“我”的“未经身份验证”的identityId。认知如何阻止别人声称自己是“我”?

GetCredentialsForIdentityRequest request = new GetCredentialsForIdentityRequest();
request.setIdentityId("us-west-2:639dc6e0-1f14-4c0a-9a08-a48c742f5395"); //Could I just enter whatever identity Id I want here?  Is knowing what the identityId is the security?  Is that really secure?
GetCredentialsForIdentityResult result = cognitoIdentityClient.getCredentialsForIdentity(request);

从AWS JAVA SDK显示的代码

0 个答案:

没有答案