aws-solutions / content-analysis-on-aws

As of August 30, 2023, this AWS Solution is no longer available. Existing deployments will continue to run. The functionality provided by Content Analysis on AWS will be superseded with functionality in Media2Cloud on AWS and Content Localization on AWS. We encourage you to explore these solutions.
https://aws.amazon.com/solutions/implementations/aws-content-analysis/
Apache License 2.0
96 stars 47 forks source link

Cognito - Google signon does not work #71

Closed sknadella87 closed 1 year ago

sknadella87 commented 2 years ago

Describe the bug

Successfully created the stack and I can access the cloudfront Url without any issues.

Followed the instructions (listed below) to integrate the cloudfront url with google authentication via AWS cognito. After creating the user pool within cognito and setting up the google project within the developer account. The hosted UI within AWS cognito redirected me to the google page and the URL redirects with the cloudfront url + the token but prompts me for username and password.

https://aws.amazon.com/premiumsupport/knowledge-center/cognito-google-social-identity-provider/

To Reproduce

  1. Click on create stack - https://github.com/aws-solutions/content-analysis-on-aws
  2. Once the stack gets created successfully then output tab within the stack provides cloudfront URL and also creates a cognito user pool.
  3. Follow the instructions listed in https://aws.amazon.com/premiumsupport/knowledge-center/cognito-google-social-identity-provider/ URL to configure google OAuth.
  4. After cognito google auth is complete the hosted UI will be available within cognito - app client settings.
  5. Click on hosted UI and then you'll be redirect to google auth but after selecting your gmail the page gets redirected to cloudfront landing page instead of creating the user account and logging in directly to the website.

FYI - Tried deploying this stack in different regions numerous times and I still see the same issue. I believe the application is not storing the access and token ID or something which is not letting the website to authentication.

Expected behavior After google authentication AWS content analysis page redirects to the login page instead of using google / gmail credentials to log directly into the AWS content analysis page

Please complete the following information about the solution:

To get the version of the solution, you can look at the description of the created CloudFormation stack. For example, "(SO0021) - Video On Demand workflow with AWS Step Functions, MediaConvert, MediaPackage, S3, CloudFront and DynamoDB. Version v5.0.0". If the description does not contain the version information, you can look at the mappings section of the template:

Mappings:
  SourceCode:
    General:
      S3Bucket: "solutions"
      KeyPrefix: "video-on-demand-on-aws/v5.0.0"
raulmlamzn commented 1 year ago

Starting on August 30, 2023 Content Analysis on AWS will no longer be supported and the GitHub repository will be archived. Existing deployments will continue to run. If you have deployed Content Analysis on AWS via cloning GitHub open source code, you may continue to use the solution.

The functionality provided by Content Analysis on AWS will be superseded with functionality in Media2Cloud on AWS and Content Localization on AWS. We encourage you to explore these solutions.

https://github.com/aws-solutions/media2cloud-on-aws https://github.com/aws-solutions/content-localization-on-aws