Support UserPool auth for AppSync Events with App Router SSR Auth

[tmokmss]

Is this related to a new or existing framework?

React

Is this related to a new or existing API?

GraphQL API

Is this related to another service?

No response

Describe the feature you'd like to request

I want to authenticate AppSync Events connection with Cognito UserPool and also use Amplify Next.js adapter to authenticate with SSR.

Currently AppSync Events only supports CSR userpool configuration.

Describe the solution you'd like

AppSync Events authentication should support credentials from Amplify Next.js adapter (SSR) userpool session.

Describe alternatives you've considered

Currently I think I can use API key instead, but it is not ideal from security perspective.

Additional context

No response

Is this something that you'd be interested in working on?

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

[HuiSF]

Hi @tmokmss thanks for opening this issue.

AppSync Events API is WebSocket based, which makes sense that establishing the WebSocket connection per user, and per client directly from the client side. In your description, you hope to authenticate the Event API with Cognito UserPool, so I presume it is a per user use case, how would this work establishing WebSocket connections from your server for arbitrary number of end users, could you give more details about your use cases?

[tmokmss]

@HuiSF Thanks. Sorry for causing confusion. I'd like to connect to AppSync Events API from client side while fetching Cognito access token from server side. When using Cognito client side authentication, it is easy to connect to event api (by just setting defaultAuthMode: "userPool") . But I guess when using Cognito SSR auth (using http-only cookie), it is currently difficult to integrate with events api from client side, right?