state value is not json in parse-auth about cloudfront-authorization-at-edge

[ottokruse]

Mmm.... that makes no sense to me. Is this when the nonce mismatch occurs?

Are you using federation with you Cognito user pool? If so, have a read of this #32 and #21 they explain why we added base64 encoding of state.

Was this an incidental error? How often does this happen?

[alexantom]

@ottokruse this happened only twice or so, couldn't reproduce the issue again. Let me take a look into the issue mentioned

[ottokruse]

Believe this was caused by the + / and = characters that can be present in base64 encoded strings.

We URI encoded these to be able to put them in the URL state query param, that should be returned to us by Cognito unaltered after sign-in. However, together with another user I was able to uncover that Cognito URL decodes the state query param on the way back. Our code did not expect that.

Implemented a work around in #47 that should prevent any unexpected URI component decoding.

Not 100% sure that this solves your issue, the state param you mention contains a space character, which I cannot explain - copy-paste typo?

Closing this issue for now. Please report back if this issue persists

[alexantom]

Thanks @ottokruse for the details, will take a look