Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

Password verification in a CUSTOM_AUTH flow, do you need to handle SRP yourself?

0

If I want to verify a username and password, AND go through the custom auth flow, would I need to implement SRP myself? i.e. generate SRP_A and calculate PASSWORD_CLAIM_SIGNATURE

Is there no way to bypass these SRP calculations / Is there no function to do these calculations for me?

Argomenti
Sicurezza, identità e conformità
Tag
Amazon Cognito
Lingua
English
SimonM
posta 2 anni fa222 visualizzazioni
1 Risposta
0

Hi,

It's possible to use the SRP flow if you use it before dropping into the custom challenges. This blog shows the process specifically with Duo but you could replace the custom challenges with your own.

Thanks, Owen

AWS
Owen
con risposta 2 anni fa
  • SimonM
    2 anni fa

    Oh, I'm trying to avoid SRP. I want to validate the users password/credentials and go through the CUSTOM_AUTH flow, but I don't want to have to work out SRP_A and PASSWORD_CLAIM_SIGNATURE

    So far it seems like SRP_A and PASSWORD_CLAIM_SIGNATURE are unavoidable if I want to validate username and passwords with CUSTOM_AUTH flow

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente