search

aws-amplify / amplify-cli

The AWS Amplify CLI is a toolchain for simplifying serverless web and mobile development.
Apache License 2.0
2.8k stars 819 forks source link

Is there a way to remove CognitoUserPool in Identity Providers and remove Sign in/Sign out URLs? #5481

Open aedrianescultura opened 3 years ago

aedrianescultura commented 3 years ago

Which Category is your question related to? Authentication

Amplify CLI Version 4.29.4

What AWS Services are you utilizing? Cognito

Provide additional details e.g. code snippets Is there a way to disable the Cognito User Pool as one of the Identity Providers? Is there a way to remove a URL in Callback and Sign out URLs section?

Capture

ammarkarachi commented 3 years ago

@aedrianescultura you can run amplify update auth to update auth settings for the url. You can remove auth and re-add auth

aedrianescultura commented 3 years ago

@aedrianescultura you can run amplify update auth to update auth settings for the url. You can remove auth and re-add auth

This option: Add/Edit signin and signout redirect URIs does not allow you to remove the redirect URIs. You can only add or edit, but you cannot remove the URI.

kaustavghosh06 commented 3 years ago

@aedrianescultura Answers to both your questions: Q: Is there a way to disable the Cognito User Pool as one of the Identity Providers? Answer: No - we do not support this as a feature today as we've not seen many customers using this pattern to disable cognito user pool login and only allow social login - I'll mark this as a feature request and if there are more customers needing this we can add it to our CLI flows.

Q: Is there a way to remove a URL in Callback and Sign out URLs section? Right now, if you have social federation we require you to enter the callback and signout URL's following best practices. What's your use-case of enabling oAuth social federation but not have callback and signout URL's?

cc @renebrandel

aedrianescultura commented 3 years ago

@kaustavghosh06 I do use callback and signout URLs. However, there was an instance where I needed to remove one of the URLs and I did not find a way to do this from the CLI.

kaustavghosh06 commented 3 years ago

@aedrianescultura Got it. Yes - the CLI UX doesn't allow for this today when you add multiple URL's. I'm adding this as an enhancement which we can look into. cc @renebrandel As a workaround/escape-hatch, you can go into the amplify/backend/auth/<resource-name>/parameters.json file and manually update the "CallbackURLs" and "LogoutURLs " present in there.

aedrianescultura commented 3 years ago

@kaustavghosh06 The enhancement would be great. Thanks for the workaround.

evank28 commented 1 month ago

Any update on enabling social-only login?