amazon-archives / realworld-serverless-application

This project is inspired by the design and development of the AWS Serverless Application Repository - a production-grade AWS service. Learn how AWS built a production service using serverless technologies.
Apache License 2.0
515 stars 108 forks source link

fix: Switch to USER_SRP_AUTH auth flow type #52

Closed carvantes closed 4 years ago

carvantes commented 4 years ago

Issue #, if available: #50

Testing Ran website with new config locally. AuthN works fine. Inspected the requests and verified that the default USER_SRP_AUTH is now being used.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

honglu commented 4 years ago

AWS CodeBuild CI Report

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

honglu commented 4 years ago

Don't you need to change ExplicitAuthFlows in the template?

jlhood commented 4 years ago

@honglu Not sure, but It doesn't look like USER_SRP_AUTH is even an option for ExplicitAuthFlows so maybe that setting is unrelated?

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-explicitauthflows