To use MFA do I need to disable client secretion in cognito?

0

I'm implementing MFA authentication in a nodejs back-end application.

Method:

 public async respondToAuthChallenge(payload: RespondToAuthChallengeDto) {
    const params = {
      ClientId: this.clientId,
      ChallengeName: 'SOFTWARE_TOKEN_MFA',
      ChallengeResponses: {
        SOFTWARE_TOKEN_MFA_CODE: payload.mfaCode,
      },
      Session: payload.session
    };    

    return this.cognitoIdentityServiceProvider.respondToAuthChallenge(params).promise();
  }

Respose error:

Client [ID_CLIENT] is configured with secret but SECRET_HASH was not received

But if I add the secret hash I have this error

Unexpected key 'SECRET_HASH' found in params

The problem is that the params of the 'respondToAuthChallenge' method do not have the SecretHash, but my application aware has the secret client enabled. Do I need to disable client secretion to use MFA?

답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인