aws-cognito

Features

[!NOTE] Last Updated: 2026-07-31

This document provides a list of features provided by this package. It is not a complete list of features provided by AWS Cognito. For a complete list of features, please refer individual sections of this document.

Functional

• Registering Users OR Sign Up
  • Self Registration
  • Verification of User / Confirm Sign Up
• User Invitation OR Invite User
• User Authentication OR Sign In
• Log Out OR Sign out
  • Sign out and remove access tokens
• Forgot Password
• Refresh Token
• Delete User
• Single Sign-On (SSO)
• Password Validation
• Token Validation
• Multi-Factor Authentication (MFA)
• FIDO2 Security Keys Passkey
• SRP Authentication
• Device Authentication

Technical

• Easy API Token handling (uses the cache driver). Refer Changes in Auth Configurations
• DynamoDB support for Web Sessions and API Tokens. It is useful for server redundency OR multiple containers. Refer Session Storage Configurations
• Support for App Client without Secret
• Support for Cognito Groups, including assigning a default group to a new user
• Session (Web) now has AccessToken and RefreshToken as part of the claim object
• Password validation based on Cognito Configuration
• Mapping Cognito User using Subject UUID
• Preconfigured routes and controllers for Web and API
• Preconfigured views for Web

What this package provides

1. A simple way to integrate AWS Cognito into your Laravel application.
2. Preconfigured set of routes, controllers, and views for Web and API.
3. You don’t need to create an extra field to store the verification token.
4. You don’t have to bother about the Sessions or API tokens, they are managed for you. The session or token is managed via the standard mechanism of Laravel. You have the liberty to keep it where ever you want, no security loop holes.

This site is open source. Improve this page.