Authentification with AWS Cognito

[tuankietngo]

Hello
I'm using AWS Cognito as the OICD for Tapir authentification. When i logined, i received the 401 unauthorized. I know that i need to put the role admin into the token of Cognito. But i don't know how to put it in the token, i used a lambda for pre token generation to add a customized claim into the token. I tried to add this claim but i didn't work:

• "groups":"admin"

So i want to ask:

• Can Tapir work with AWS Cognito for the authentification ?
• If yes, How to add a customized claim to the token for authentification of Tapir ?
  Thanks