Securing AWS AppSync with Kinde

Kinde is an OAuth2-compliant Identity Provider that can be integrated with AWS AppSync, a serverless GraphQL service, to secure endpoints by validating JSON Web Tokens (JWTs). To set up this integration, adjustments are made in the AppSync service to accept a valid JWT from Kinde by selecting OpenID Connect as the default authorization mode and entering the Kinde business URL in the settings. Users can then generate a token from Kinde to authenticate calls to the AppSync endpoint. Testing the setup involves configuring the Kinde admin portal and using Postman to obtain an access token, which, when applied to the AppSync console, verifies that the GraphQL queries are executed only with a valid token. This process facilitates an easy and secure way to authorize access to AppSync APIs using Kinde.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.