Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(cognito): choice-based authentication (passwordless sign-in / passkey sign-in) #32369

Merged
merged 26 commits into from
Feb 13, 2025
Merged
Show file tree
Hide file tree
Changes from 7 commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
d3e94df
feat: passwordless sign-in
Tietew Dec 3, 2024
9a5a230
integ test
Tietew Dec 3, 2024
a6f16d8
check featurePlan
Tietew Dec 5, 2024
3ce032f
emphasize *user* verification
Tietew Dec 6, 2024
53ffbfb
update to refer choice-based authentication
Tietew Dec 6, 2024
5d22a32
Merge branch 'main' into cognito-userpool-passwordless
Tietew Dec 7, 2024
9854255
Merge branch 'main' into cognito-userpool-passwordless
Tietew Jan 7, 2025
c078c14
Merge branch 'main' into cognito-userpool-passwordless
Tietew Jan 30, 2025
6b65ce0
return undefined when no allowed factors
Tietew Jan 30, 2025
51468c7
validate length of passkeyRelyingPartyId
Tietew Jan 30, 2025
3c1778b
eslint fix
Tietew Jan 30, 2025
ff2de74
Merge branch 'main' into cognito-userpool-passwordless
Tietew Feb 3, 2025
882cf41
Revert "return undefined when no allowed factors"
Tietew Feb 3, 2025
27eb274
test explicit blank
Tietew Feb 3, 2025
69e8b8b
choice-based authentication
Tietew Feb 3, 2025
849e3db
Merge branch 'main' into cognito-userpool-passwordless
Tietew Feb 4, 2025
72501dc
add explicit password auth factor
Tietew Feb 4, 2025
92e1e11
add iteg test explicit disable choice-based authentication
Tietew Feb 4, 2025
b1a07b1
require `password: true` always
Tietew Feb 4, 2025
9cf2814
fix typo
Tietew Feb 4, 2025
79e6c9a
Update packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts
Tietew Feb 13, 2025
b821f62
Merge branch 'main' into cognito-userpool-passwordless
Tietew Feb 13, 2025
9df99ce
allowedFirstAuthFactors wrapped in signInPolicy
Tietew Feb 13, 2025
c2d1346
update doc
Tietew Feb 13, 2025
31b26cc
password is now mandatory to specify true
Tietew Feb 13, 2025
b8b00ef
Merge branch 'main' into cognito-userpool-passwordless
mergify[bot] Feb 13, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Original file line number Diff line number Diff line change
@@ -0,0 +1,88 @@
{
"Resources": {
"myuserpool01998219": {
"Type": "AWS::Cognito::UserPool",
"Properties": {
"AccountRecoverySetting": {
"RecoveryMechanisms": [
{
"Name": "verified_phone_number",
"Priority": 1
},
{
"Name": "verified_email",
"Priority": 2
}
]
},
"AdminCreateUserConfig": {
"AllowAdminCreateUserOnly": true
},
"DeletionProtection": "INACTIVE",
"EmailVerificationMessage": "The verification code to your new account is {####}",
"EmailVerificationSubject": "Verify your new account",
"Policies": {
"SignInPolicy": {
"AllowedFirstAuthFactors": [
"PASSWORD",
"EMAIL_OTP",
"WEB_AUTHN"
]
}
},
"SmsVerificationMessage": "The verification code to your new account is {####}",
"VerificationMessageTemplate": {
"DefaultEmailOption": "CONFIRM_WITH_CODE",
"EmailMessage": "The verification code to your new account is {####}",
"EmailSubject": "Verify your new account",
"SmsMessage": "The verification code to your new account is {####}"
},
"WebAuthnRelyingPartyID": "example.com",
"WebAuthnUserVerification": "required"
},
"UpdateReplacePolicy": "Delete",
"DeletionPolicy": "Delete"
}
},
"Outputs": {
"userpoolpasswordless": {
"Value": {
"Ref": "myuserpool01998219"
}
}
},
"Parameters": {
"BootstrapVersion": {
"Type": "AWS::SSM::Parameter::Value<String>",
"Default": "/cdk-bootstrap/hnb659fds/version",
"Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
}
},
"Rules": {
"CheckBootstrapVersion": {
"Assertions": [
{
"Assert": {
"Fn::Not": [
{
"Fn::Contains": [
[
"1",
"2",
"3",
"4",
"5"
],
{
"Ref": "BootstrapVersion"
}
]
}
]
},
"AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
}
]
}
}
}

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading