aws / aws-appsync-community

The AWS AppSync community
https://aws.amazon.com/appsync
Apache License 2.0
506 stars 32 forks source link

Bug: Observing "Unknown Error" while signing in AppSync console when using Cognito Userpool with TOTP MFA enabled #206

Open ghost opened 2 years ago

ghost commented 2 years ago

Description: Unable to sign in to AppSync Queries console when user has opt in TOTP MFA.

Replication steps:

  1. Using Amplify Console, create a new app using "Build an App" option, and Launch Amplify Studio.
  2. Add authentication: I only options I changed were, to "Multi-factor authentication" : Enforced, and select only "Authenticator Application" checkbox
  3. Pull the backend in local react application
  4. And Signup to the app and scan QR code using Google authenticator.
  5. Create an API with cognito user pool as default authentication
  6. Select a userpool with TOTP MFA created above
  7. Try logging in the "Queries" console in Appsync console.
  8. Enter "ClientId", "username", "password", and click "Login"

Issue: UI is showing "Unkown error"

image_error_totp

In Console logs error: main.js:146 [Report Only] Refused to connect to 'https://cognito-idp.eu-west-1.amazonaws.com/' because it violates the following Content Security Policy directive: "connect-src https://cognito-idp/.*.amazonaws.com https://eu-west-1.console.aws.amazon.com/api/ https://us-east-1.console.aws.amazon.com/feedback/custsat/ https://console.aws.amazon.com/aperture/feedback/render 'self' https://*.appsync-api.eu-west-1.amazonaws.com/graphql https://console.aws.amazon.com/panoramaroute https://console.aws.amazon.com/ https://media.amazonwebservices.com/ https://phd.aws.amazon.com/ https://console.aws.amazon.com/aperture/feedback/submit https://console.aws.amazon.com/aperture/csat/prompt wss://..............-ats.iot.eu-west-1.amazonaws.com https://ccs.amazonaws.com/ https://*.ccs.amazonaws.com https://*.analytics.console.aws.a2z.com https://..................cloudfront.net/ https://console.aws.amazon.com/feedback/custsat/ https://console.aws.amazon.com/panoramaroute/allowlist https://...............cloudfront.net/ https://eu-west-1.console.aws.amazon.com/panoramaroute/allowlist https://eu-west-1.prod.signer.console-api.aws.amazon.com/ https://eu-west-1.console.aws.amazon.com/p/ https://eu-west-1.console.aws.amazon.com/lotus/metadata https://eu-west-1.console.aws.amazon.com/panoramaroute https://us-east-1.ctrl.prod.os.notifications.aws.dev/".

zocom-johan-kivi commented 2 years ago

Any news here? I have the same issue and cant move forward without it been resolved.

Zowlex commented 2 years ago

Having the same issue too.

esteban-uo commented 1 year ago

+1

zerox92 commented 1 year ago

+1