aws-amplify / amplify-ui-swift-liveness

This repository offers a UI component for Amazon Rekognition Face Liveness, enabling developers to ensure that only authentic users, and not bad actors using spoofs, can access their services.
https://ui.docs.amplify.aws/swift/connected-components/liveness
Apache License 2.0
9 stars 20 forks source link

Liveness without Cognito #95

Closed komus closed 8 months ago

komus commented 8 months ago

I am trying to use liveness accesskey and secretkey, but getting the below error

Liveness error: FaceLivenessDetectionError(code: 4, message: "Not authorized to perform a face liveness check.", recoverySuggestion: "Valid credentials are required for the face liveness check.")

The service account is assigned permission policy AdministratorAccess-Amplify, can you assist with what is wrong ` let accessKey = "" let secretKey = "" let credentialsProvider = myCredentialProvider { myAWSCredentials(accessKeyId: accessKey, secretAccessKey: secretKey) } self.sessionID = ""

    if let sessionID = self.sessionID {
        let faceLivenessSwiftUIView = FaceLivenessDetectorView(
            sessionID: sessionID,
            credentialsProvider: credentialsProvider,
            region: "us-east-1",
            disableStartView: false,
            isPresented: .constant(true),
            onCompletion: { result in
                switch result {
                case .success:
                    print("Liveness successfully completed")
                case .failure(let error):
                    print("Liveness error: \(error)")
                }
            }
        )

        let hostingController = createHostingController(with: faceLivenessSwiftUIView)
        addHostingControllerAsChild(hostingController)
        configureConstraints(for: hostingController.view) `
phantumcode commented 8 months ago

@komus Can you verify that your IAM policies are configured appropriately and ensure the region is correct.

The role associate with the credential should have permission to start face liveness

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "rekognition:StartFaceLivenessSession",
            "Resource": "*"
        }
    ]
}

Your backend service/lambda should have permission to create the session id and get the liveness result

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "rekognition:CreateFaceLivenessSession"
            ],
            "Resource": "*"
        }
    ]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "rekognition:GetFaceLivenessSessionResults",
            "Resource": "*"
        }
    ]
}
komus commented 8 months ago

Thank you @phantumcode, the permission was missing from the default AWS amplify permission. The suggestion worked