AWS Cognito SDK for for USER_PASSWORD_AUTH flow

Question

Cognito IDP allows below 3 AWS CLI to Signup, Confirm and Generate ID Token:

aws cognito-idp sign-up --region ap-south-1 --client-id xxx --username xx@xx.com --password xxx
aws cognito-idp confirm-sign-up --client-id xxxx --username xxx@xx.com --confirmation-code xxx
aws cognito-idp initiate-auth --auth-flow USER_PASSWORD_AUTH --client-id xx --auth-parameters USERNAME=xx,PASSWORD=xx

I'm able to initiate Step 1 and Step 2 via AWSCognitoIdentityProvider.signUp() & AWSCognitoIdentityProvider.confirmSignup(). However the Step 3 fails irrespective of valid creds.

Below is the code used:

public String initiateAuth(String username, String password) {
     String idToken = null;
     AWSCognitoIdentityProvider cognitoClient;
     Map<String, String> authParams = new HashMap<String, String>();
     authParams.put("USERNAME", username);
     authParams.put("PASSWORD", password);
     InitiateAuthRequest initiateAuthRequest = new InitiateAuthRequest(); 
     initiateAuthRequest.setAuthFlow("USER_PASSWORD_AUTH");
     initiateAuthRequest.setClientId(CLIENT_ID);
     initiateAuthRequest.setAuthParameters(authParams);
     
/*       
       // I have tried enabling as below
     initiateAuthRequest.setAuthFlow(AuthFlowType.USER_PASSWORD_AUTH);
     initiateAuthRequest.addAuthParametersEntry("USERNAME", username);
     initiateAuthRequest.addAuthParametersEntry("PASSWORD", password);
*/   

     try {
            cognitoClient = getAmazonCognitoIdentityClient();
            
            InitiateAuthResult result =  cognitoClient.initiateAuth(initiateAuthRequest);
            idToken = result.getAuthenticationResult().getIdToken();
        } catch (Exception e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
            idToken = "false";
        } finally {
            System.out.println("AWS COgnito Status = " + idToken);
        }
    return idToken;
}

You’ve enabled the auth type (user password) for your client? — Andrew Gillis, Sep 29 '21 at 05:16

score 0 · Answer 1 · answered May 16 '22 at 07:01

Try this way. Where identityProvider is IAmazonCognitoIdentityProvider and UserPool is CognitoUserPool

public string SignIn(string username, string password, CancellationToken token)
{
     try
     {
         var cUser = new CognitoUser(username, CognitoUserPoolAppId, UserPool, identityProvider);
         var authRequest = new InitiateSrpAuthRequest()
         {
             Password = password
         };
         var response = await cUser.StartWithSrpAuthAsync(authRequest);
         return response.AuthenticationResult.IdToken;
     }
     catch(Exception exc)
     {
         return string.Empty;
     }
}

AWS Cognito SDK for for USER_PASSWORD_AUTH flow

1 Answers1