AWS cognito: Cognito token doc: capitalization and hyphenation style fixes
Summary
Editorial-only changes: 'JSON Web Tokens' -> 'JSON web tokens' and 'personally-identifying information' -> 'personally identifying information'. The sentence advising users to secure tokens in transit and in storage, and the note that token revocation adds origin_jti/jti claims that increase token size, are unchanged in meaning.
Security assessment
The diff only removes/alters hyphenation and capitalization; the pre-existing best-practice guidance about protecting tokens in transit and at rest, and about token-size growth from the origin_jti and jti claims enabled by token revocation, is not added, expanded, or materially modified. No security control, posture change, or vulnerability reference is present.
Evidence
+As a best practice, secure all tokens in transit and storage in the context of your application. Tokens can contain personally identifying information about your users, and information about the security model that you use for your user pool.
Diff
diff --git a/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.md b/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.md index 50b39b8..e591ce6 100644 --- a//cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.md +++ b//cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.md @@ -23 +23 @@ When a user signs into your app, Amazon Cognito verifies the login information. -Your app must be able to store tokens of varying sizes. Token size can change for reasons including, but not limited to, additional claims, changes in encoding algorithms, and changes in encryption algorithms. When you enable token revocation in your user pool, Amazon Cognito adds additional claims to JSON Web Tokens, increasing their size. The new claims `origin_jti` and `jti` are added to access and ID tokens. For more information about token revocation, see [Revoking tokens](https://docs.aws.amazon.com/cognito/latest/developerguide/token-revocation.html). +Your app must be able to store tokens of varying sizes. Token size can change for reasons including, but not limited to, additional claims, changes in encoding algorithms, and changes in encryption algorithms. When you enable token revocation in your user pool, Amazon Cognito adds additional claims to JSON web tokens, increasing their size. The new claims `origin_jti` and `jti` are added to access and ID tokens. For more information about token revocation, see [Revoking tokens](https://docs.aws.amazon.com/cognito/latest/developerguide/token-revocation.html). @@ -27 +27 @@ Your app must be able to store tokens of varying sizes. Token size can change fo -As a best practice, secure all tokens in transit and storage in the context of your application. Tokens can contain personally-identifying information about your users, and information about the security model that you use for your user pool. +As a best practice, secure all tokens in transit and storage in the context of your application. Tokens can contain personally identifying information about your users, and information about the security model that you use for your user pool.