sub attribute on Cognito Pre Sign Up lambda

0

I'd like to have access to the sub attribute on the pre-sign-up trigger function when customer is signin up with external IdP. Will this be possible in the near future?

Use case is that the authorization layer of the application is handled in the backend, so I need to insert the user to database in the sign up process.

Related thread: https://forums.aws.amazon.com/thread.jspa?threadID=309346

teemu
posta 2 anni fa1162 visualizzazioni
1 Risposta
1
Risposta accettata

Hi,

SUB is not available in pre-signup trigger because the user hasn't been created at this stage (it is "pre" sign-up, meant for validation to decide whether to allow the sign-up to continue or reject the request). If you want to propagate the SUB to backend you should use PostConfirmation trigger for this, this will be triggered after the user has been created and confirmed.

AWS
ESPERTO
con risposta 2 anni fa
  • Thanks for the quick reply.

    Does post confirmation trigger execute before the authentication flow is complete? We need the user to be present in the database before user is redirected back to the frontend after the sign up?

  • I did some experimentation and post confirmation is indeed part of the external provider sign up flow. That solves the issue, thanks! The documentation could be more clear on this though.

    Noted also that when using adminCreateUser, the post confirmation doesn't trigger. I can imagine there would be many use cases for using a trigger which runs every time after the user has been created to the pool, no matter which way the creation happened.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande