[Question] Does this work with the default Cognito UI? about cloudfront-authorization-at-edge

[ottokruse]

Hi! Can you provide some more details on what goes wrong?

• What is the error message from the Cognito hosted UI?
• What do you see in the logs of the Lambda@Edge function? Check the logs of the checkAuth and parseAuth functions please?

Could you try creating the user in the AWS Console first and then sign in? (Instead of "self registering" the user through the Hosted UI). Does that work?

[fred97855]

Hi @ottokruse,
I've attached a screenshot of the error, as you can see its not very helpful :(
There don't appear to be able logs generated by those, when using the hosted UI

Is there a way to see logs from the hosted UI?

[ottokruse]

You can't see the logs from the hosted UI––it should return it's error clearly to you. Check if you maybe see it in the URL, Cognito sometimes puts the error there, as a query param.

For debugging this I recommend to open your Browser's network panel (press F12) and inspect all the redirects happening. Have a look at the HTTP requests: which URL's do they go to, which redirects are happening, does anything seem to be off?

[fred97855]

Hi @ottokruse - I finally managed to track down the cause. I had extracted all this into a Terraform project, and somehow Terraform was deploying the configuration for "How do you want your end users to sign in?" Like nothing was selected (not even sure how thats possible?) So I think when the user was being registered, something within Cognito itself died causing the error. Now it has config options selected, it works perfectly.

Thanks

[rpattcorner]

@fred97855 , if you see this comment I'd very much like to see how you implemented this framework in Terraform!

[fred97855]

@rpattcorner I will put together an example and send over a repo asap :)