About the grant type for the USER_SRP_AUTH in AWS Cognito

Question

Hello,
We are now facing the issue of scope when using USER_PASSWORD_AUTH to having the login by InitiateAuth function. As now we need to change from Authorization code grant type to Client Crediential grant type, is it true that the USER_SRP_AUTH support the Authorization code grant type? If not, may I know what grant type is USER_SPR_AUTH belong? Thanks. 
Regards,
Jimmy Shum

Answer

The USER_SRP_AUTH flow is used in the InitiateAuth API call (as described here) - https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html

This is an alternative integration method to login directly to the user pool using AWS APIs rather than the OAuth flows.

For client credentials/auth code grants - these are configured through the Hosted UI settings.  You can in fact disable USER_SRP_AUTH and USER_PASSWORD_AUTH if you are only using the OAuth flows.

About the grant type for the USER_SRP_AUTH in AWS Cognito

相關內容