0002 - Cognito for Authentication and Authorisation¶
Date¶
2022-05-27
Status¶
Accepted
Context¶
We want a way to protect Evenergi services from being used by unauthenticated/unauthorised parties. We currently use FusionAuth which has a lot of overhead for hosting an authentication server. We heavily use AWS products for hosting products, the Cognito AWS offering provides user management and Authentication, which is easily tied in to our current infrastructure with AWS.
Decision¶
We will use Cognito for authentication and authorisation of user actions.
Consequences¶
We will have to integrate the new authentication framework with our front-end code. This can be done via the AWS SDK, Terraform or AWS Amplify. This decision will be documented in a subsequent ADR.
FusionAuth will become a deprecated strategy in our code base and will be gradually replaced.