Authorization code flow with custom UI and Cognito

Question

I was looking the documentation trying to figure out how to use Authorization code flow with custom UI and Cognito, but looks like this still not possible, am I right?

I have tried somethings as wrap all the call in my api, but doesn't seem this would solve my problem. The main objective is because the HostedUI, doesn't fulfill the requirements that I have to use the Cognito server. Does anyone know how to do this?

Answer

Hi,

It is not currently possible to implement oauth2 authorization code flow without using hosted UI for authentication, this is because there is no public API to retrieve the authorization code itself from Cognito and it has to be passed back to hosted UI after successful authentication.

If you want to use custom UI, you can either just use the SDK to authenticate users using InitiateAuth API or Amplify SignIn (this is not oauth2), or if you must use oauth2 then you need to build your oauth2 endpoints on top of Cognito APIs (similar to [Amplify identity broker](https://github.com/awslabs/aws-amplify-identity-broker)).

Authorization code flow with custom UI and Cognito

Contenuto pertinente