admin管理员组

文章数量:1289911

We have a .NET application running on ECS Fargate. The application sits behind an ALB and is configured to authenticate using Cognito with a federation with Entra ID.

On authenticating, we get the Access Token, User Claims and Identity from the ALB added in the headers. When we decode the JWT tokens, we found that access token contains the correct exp and iat timestamps within it. It aligns with the values we set in Cognito for expiration times. The exp in the User Claims, on the other hand, is always set to 2mins from current time. If the browser is refreshed, the exp timestamp changes again.

Does anyone have an idea from where exp timestamp is added in the user claims? Is this an expected behaviour?

I tried changing the expiration times in all places, ALB and Cognito, but to no avail.

本文标签: amazon web servicesquotExpquot User Claims in ID Token of ALBCognitoStack Overflow