ngx-cognito-auth

ngx-cognito-auth is an Angular library that simplifies secure authentication with AWS Cognito in single-page applications. It implements the OAuth 2.0 Authorization Code flow with PKCE, eliminating the need for a client secret and making it safe for browser-based SPAs.

Key Features

• PKCE-Secured Login — Uses the OAuth 2.0 Authorization Code flow with Proof Key for Code Exchange, requiring no client secret.
• Automatic Token Management — Handles silent token refresh via refresh tokens and automatically injects Bearer tokens into HTTP requests.
• Route Protection — Provides a route guard to redirect unauthenticated users to Cognito and a callback resolver to handle OAuth redirects.
• Reactive State with Signals — Offers Angular Signals-based reactive state for access tokens, user data, and authentication status.
• Configurable Storage — Stores access and ID tokens in sessionStorage and refresh tokens in localStorage with a configurable key prefix.

Philosophy

The library is designed to provide a secure, declarative, and Angular-native way to integrate AWS Cognito authentication, handling complex OAuth flows and token lifecycle management automatically so developers can focus on building their applications.