By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

About the grant type for the USER_SRP_AUTH in AWS Cognito

0

Hello, We are now facing the issue of scope when using USER_PASSWORD_AUTH to having the login by InitiateAuth function. As now we need to change from Authorization code grant type to Client Crediential grant type, is it true that the USER_SRP_AUTH support the Authorization code grant type? If not, may I know what grant type is USER_SPR_AUTH belong? Thanks. Regards, Jimmy Shum

Topics
Security, Identity, & Compliance
Tags
Amazon Cognito
Language
English
jimmysyw
asked a year ago339 views
1 Answer
0

The USER_SRP_AUTH flow is used in the InitiateAuth API call (as described here) - https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html

This is an alternative integration method to login directly to the user pool using AWS APIs rather than the OAuth flows.

For client credentials/auth code grants - these are configured through the Hosted UI settings. You can in fact disable USER_SRP_AUTH and USER_PASSWORD_AUTH if you are only using the OAuth flows.

AWS
Owen
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content