7,419
questions
1
vote
0
answers
36
views
How to Set Up Amazon Cognito as the Sole SAML Identity Provider (IdP) Without Third-Party Integration?
I'm currently working on setting up Amazon Cognito as the sole SAML Identity Provider (IdP) for my web and mobile applications. Most of the documentation and guides I've found, such as this AWS blog, ...
0
votes
1
answer
18
views
AWS Cognito: Missing Scopes in Access Token with Custom UI and Device Remember Functionality for MFA
I'm using AWS Cognito and working with the Hosted UI. The problem I have is that I'm unable to remember a device for a given user, so I can't prevent the requirement of entering the authenticator code ...
0
votes
0
answers
16
views
AWS IoT permission policy for user authenticated with Cognito UserPool and Cognito IdentityPool
As stated in docs (https://docs.aws.amazon.com/iot/latest/developerguide/connect-and-pub.html)
For devices not registered as things in the AWS IoT Core registry, the
following policy grants ...
-1
votes
0
answers
31
views
How to configure AWS Cognito Federated Identity Provider's `IdP-initiated SAML sign-in` field? [closed]
I am working on terraforming my AWS Cognito User Pools, but my google-fu is failing me. How do I configure my federated identity provider so that it's IdP-initiated SAML sign-in is assigned to Require ...
0
votes
1
answer
26
views
How to disable Self-Registration for AWS Cognito User Pool from Terraform?
I'm trying to terraform my AWS Cognito User Pool configuration. I'm using federated authentication and would like to disable user self-registration / sign-up. How can I do this via terraform?
0
votes
0
answers
17
views
AWS Cognito: How to obtain an access token after user sign-up and confirmation without requiring a separate sign-in?
I'm using AWS Cognito for user authentication. After a user signs up and confirms their account using the verification code sent via email, they are required to sign in again to receive an access ...
-1
votes
1
answer
35
views
Multi-tenant application AWS
I've gone through several posts in here, but couldn't find any that would relate to my setup, maybe the setup is bad, so i'm open to suggestions.
I'm currently trying to execute such workflow:
User ...
0
votes
0
answers
22
views
How do I connect to AWS IoT with Local Certificate in an iOS app?
What I am trying to do is use the AWS SDK ( which can be found here: https://github.com/aws-amplify/aws-sdk-ios/blob/main/README.md#aws-sdk-for-ios ) to connect to AWS IoT so that I can subcribe to ...
0
votes
0
answers
29
views
How to Integrate AWS Cognito User Pool with AWS Managed Microsoft AD?
I'm currently working on a project where I need to integrate an AWS Cognito User Pool with an AWS Managed Microsoft Active Directory (AD). The goal is to allow users authenticated via the Managed ...
0
votes
0
answers
25
views
AWS Cognito app client creation not setting up identity providers properly
I'm trying to create an app client for my Cognito user pool, using the following snippet of code:
CreateUserPoolClientRequest request = CreateUserPoolClientRequest.builder()
....
-2
votes
2
answers
30
views
Why do I have to add "All Traffic" & "0.0.0.0/0" when configuring an AWS ACL for Nat Access to AWS Cognito?
When I have my ACL's Configured like this, My lambda is not able to send Admin SDK calls to Cognito.
But when I add "All Traffic" & "0.0.0.0/0" instead of 80 and 443 the. calls ...
1
vote
0
answers
20
views
AWS Amplify and Amazon Cognito: PostAuthentication Lambda Trigger on Re-login
I am using AWS Amplify and Amazon Cognito for user authentication in my Angular application. On the first login attempt, everything works fine. However, after logging out and attempting to log in ...
0
votes
0
answers
21
views
AWS-Amplify: The tokens could not be refreshed: The token has been revoked
I have a code where, when the user tries to query a route, it checks the token in this way:
final AuthSession result = await Amplify.Auth.fetchAuthSession(
options: const FetchAuthSessionOptions(
...
0
votes
0
answers
20
views
Can AWS Cognito allow SignIn with both email and phone number if only email is required for SignUp?
I am configuring an AWS Cognito user pool where I want users to be able to SignIn using either their email or phone number. However, I plan to set only the email as a required attribute for SignUp (...
0
votes
0
answers
21
views
How to specify User's IdentityID when configuring IdentityPool's Authenticated IAM Role
Consider the following:
An AWS Cognito Identity Pool (Identity Pool ID: us-east-1:abc)
A User that exists in the above pool (Identity ID: us-east-1:xyz)
An AWS IoT Core Policy (or any AWS resource)
...
1
vote
0
answers
34
views
How to modify a custom attribute of Cognito Userpool?
I have made application which requires login and signup. The data fields of users are like (name, emailid, password and role_type(default is visitor). So there are two roles- Admin and visitor. I have ...
1
vote
1
answer
48
views
events logs show the LOGOUT event as a Success, but the session between Cognito and Keycloak keeps active
I am trying to configure Cognito as an External IDP for my Keycloak, I´ve managed to configure it`s full login methods, etc.. but when it comes to logout it just wont work, the events logs show the ...
0
votes
0
answers
36
views
export 'Auth' (imported as 'Auth') was not found in 'aws-amplify'
I shouldn't import Auth from 'aws-amplify'
I'm trying to do Change password in react.
But it is giving error when
I make these calls
const user = await Auth.currentAuthenticatedUser();
await Auth....
0
votes
2
answers
35
views
Trying to verify confirmation code during user sign up using AWS Cognito in Flutter
I am trying to verify the confirmation code for users signing up for the application using AWS Cognito in Flutter. I am receiving a Bad request, Status 400 error NotAuthorizedException (full error ...
0
votes
1
answer
29
views
How to secure AWS API Gateway with Cognito
I created a Lambda API Gateway and added a Cognito Authorizer. When I test the Authorizer in the console, it works. However when I call the API from my ASP .NET code, I do not need to add any token to ...
0
votes
0
answers
21
views
Angular + OidcSecurityService package + Forcing Signup
calling this.oidcSecurityService.authorize(); invokes the LOGIN page in cognito.
But my cognito setup also allows for sign-up, showing the "sign up" option below. Once clicked, it changes ...
0
votes
0
answers
20
views
Handling new password challenge from Cognito within NextAuth
I'm developing a Next.js application using NextAuth for managing session/authentication and AWS Cognito as the user pool.
I'm having trouble when is the first time the user tries to log in as AWS ...
1
vote
1
answer
25
views
How to Use Cognito Identity Pool with Unauthenticated Users in Amplify v6 for API Gateway Access
I've been struggling to figure out how to allow unauthenticated users to invoke my SAM backend after migrating from Amplify v5 to v6.
In Amplify v5, this configuration worked for unauthenticated users ...
1
vote
0
answers
30
views
AWS Cognito ListUsersAsync call fails to find user by phone number
I've come across the strangest issue with AWS Cognito. If my UI creates a non SSO user with a valid phone number, my API (which uses the .NET AWS SDK to call the AmazonCognitoIdentityProviderClient....
0
votes
0
answers
18
views
Is it possible to customize invitation emails within a single user pool in AWS Cognito?
I'm building multiple separate apps but would like users to be able to log into one app and be automatically logged into all of them.
My plan was to use a single Cognito user pool to accomplish this. ...
0
votes
0
answers
45
views
Access Private S3 Directory Files Through CloudFront Using AWS Signature
I'm trying to access files stored in a private directory within my S3 bucket through CloudFront. Here's the setup:
S3 Bucket Configuration:
Some files are public and can be accessed by anyone.
Other ...
0
votes
0
answers
23
views
Can Cognito custom authentication be used to authenticate by password?
The reason why I am doing this, to do MFA with a security key that normal cognito does not support for 2-step authentication.
I was able to implement this to the point where I can successfully log in ...
1
vote
0
answers
22
views
Is there any way that I can access to the header origin in Pre Authentication with Lambda?
I am trying to secure the User Pool ID by limit the domain can access to my User Pool.
If someone has my Pool ID and try to make a fake site with it, they can not make sign in/sign up to my User Pool
...
0
votes
0
answers
13
views
Handling Password Reset in AWS Cognito: Separating Code Verification and Password Change
I’m implementing a password reset flow using AWS Cognito.
Desired Flow:
1. User requests a password reset; Cognito sends a verification code.
2. User verifies the code, then transitions to a new ...
0
votes
1
answer
41
views
Amazon Cognito Logout problem Required String parameter 'redirect_uri' is not present
I can run my logout URL directly.
domain/logout?client_id={clientId}&logout_uri=https://localhost:7098/
However, when I give this link as a href to the button on the website and the button is ...
0
votes
1
answer
66
views
AWS Amplify muliple login feature same as provided by gmail and facebook
I have a use case where users can switch accounts and be instantly logged in with another account without needing to enter their password if they have logged in to the application before. I've ...
1
vote
1
answer
32
views
Can I give users the option between sending Cognito Verification Code through email or SMS?
I have a React App with AWS Amplify using Cognito for Authentication, currently I send a Verification code through the user's email but I want to give them the option to choose if they want to receive ...
0
votes
0
answers
24
views
How to properly validate user session with `aws-amplify/auth`?
Description
I've web project hosted on AWS Amplify. In this project, there are a login and sign up screen which are using the aws-amplify/auth to handle my user authentication. Since I've created the ...
1
vote
0
answers
22
views
How to make call to AWS Lambda function with Cognito User logged into ASP .NET Razor website
I believe the code below is how I would make a call to my AWS Lambda function. Users log into the site with Cognito. Would I somehow get credentials from the User.Identity or would I use an access key/...
0
votes
0
answers
26
views
How to Get Encoded JWT in Angular Using Amplify?
I'm using Angular with AWS Cognito for authentication and am trying to implement an HTTP interceptor to attach an access token to outgoing requests. My current implementation retrieves the access ...
0
votes
0
answers
23
views
Cross region authentication
I have an web application which is deployed in two aws regions. Each application is linked to its own cognito user pool.
Application A <-> User Pool A
Application B <-> User Pool B
This ...
0
votes
0
answers
21
views
Amplify React Sign In Redirect not working as intended
I'm trying to implement a feature where whenever a user logs in, depending on the Cognito attribute of user being either 'user' or 'admin.' they get redirected towards a different interface.
This is ...
0
votes
1
answer
28
views
AWS Cognito Pre Auth Trigger Error" Unrecognizable lambda output"
I'm trying to suppress the aws.cognito.signin.user.admin scope from being in the access token in certain cases. I am getting the following error
Error authenticating with Cognito: ...
0
votes
0
answers
16
views
How do I get a Cognito refresh token using Amplify?
My code, using Amplify v6:
import { Amplify } from "aws-amplify";
import { signIn, fetchAuthSession } from "aws-amplify/auth";
Amplify.configure({
Auth: {
Cognito: {
...
0
votes
0
answers
34
views
I cant make AWS Api Gateway redirect me to Cognito Hosted UI
all the tutorial video/blog i looked into do exactly the same thing, after they set up the api gateway and cognito userpool, they try to test there endpoint in api gateway and they of course get
...
0
votes
0
answers
12
views
Is it possible to return a user ID from the database in a response when signing in or verifying a user in AWS Cognito?
I'm currently working on an AWS Cognito setup where I need to store user information in a MySQL database during the pre-signup trigger. I want to use an auto-incremented primary key (PK) in the ...
0
votes
2
answers
26
views
Secure users data from admin access in AWS
I want to build an application to save data input from my user in DynamoDB and/or S3. Usually I use API Gateway and Lambda for this. With users authenticated by Cognito.
So far so easy. Now I want ...
0
votes
0
answers
20
views
Authentication from IFRAME without 3rd party cookies
I have an application that authenticates our customers via their own IDP that is federated to our application via AWS cognito.
Our customer wants a following user-experience:
When opening their ...
0
votes
0
answers
16
views
Cannot decode cognito state string
I am calling cognito with a &state=xxxxxx parameter. when I get my redirection back, I see a state param in addition to the code. It seems to be encoded somehow, but not base64 nor gzip cannot ...
0
votes
1
answer
28
views
Ugly workaround for session expiration in a Next.js app using Cognito. Is there a better solution?
I am writing a Next.js app for a client. The app is using NextAuth to authenticate users via AWS Cognito (OAuth, OIDC, JWT, etc.). Currently, I am using the Cognito hosted UI for authentication. All ...
0
votes
0
answers
14
views
Cannot send verification email link for AWS cognito
I am using AWS cognito in my ionic app to create a user but the default setting is to send a verification code, and it's working, but when i try to change the setting in the cognito console to send a ...
0
votes
0
answers
16
views
How to create an API authorization with the latest IOS SST and AWS
I want to create an API with the new SST v3 aka ION SST.
Docs don't say much about auth-related things and I feel confused.
I have a separate Next.js app and now I want to create a backend ...
0
votes
1
answer
19
views
Access token fetched from AWS Cognito oauth api endpoint is invalid when utilized by boto3
Having been confused by AWS Congito for weeks... Are there any difference between access tokens retrieved by /oauth2/token and boto3? If so, how can my backend use an access token passed from my ...
0
votes
1
answer
27
views
Issue with Google Authentication using AWS Cognito in Next.js App
I'm working on a Next.js application and trying to authenticate users with Google using AWS Cognito. The button is supposed to handle the authentication like this:
'use client'
import React, { ...
2
votes
1
answer
205
views
Integrating AWS Cognito and Azure AD: Allowing access for any Microsoft User even if they are not in the Azure AD?
Okay so my goal was to integrate google and microsoft with aws cognito to give allow users to signup/signin using their google and microsoft accounts. The google one works perfectly but since there ...