sub attribute on Cognito Pre Sign Up lambda

0

I'd like to have access to the sub attribute on the pre-sign-up trigger function when customer is signin up with external IdP. Will this be possible in the near future?

Use case is that the authorization layer of the application is handled in the backend, so I need to insert the user to database in the sign up process.

Related thread: https://forums.aws.amazon.com/thread.jspa?threadID=309346

teemu
feita há 2 anos1162 visualizações
1 Resposta
1
Resposta aceita

Hi,

SUB is not available in pre-signup trigger because the user hasn't been created at this stage (it is "pre" sign-up, meant for validation to decide whether to allow the sign-up to continue or reject the request). If you want to propagate the SUB to backend you should use PostConfirmation trigger for this, this will be triggered after the user has been created and confirmed.

AWS
ESPECIALISTA
respondido há 2 anos
  • Thanks for the quick reply.

    Does post confirmation trigger execute before the authentication flow is complete? We need the user to be present in the database before user is redirected back to the frontend after the sign up?

  • I did some experimentation and post confirmation is indeed part of the external provider sign up flow. That solves the issue, thanks! The documentation could be more clear on this though.

    Noted also that when using adminCreateUser, the post confirmation doesn't trigger. I can imagine there would be many use cases for using a trigger which runs every time after the user has been created to the pool, no matter which way the creation happened.

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas