Why am I prompted for username & password with every request to my AWS Amplify app?

Question

I'm attempting to restrict access to my AWS Amplify application using the Access Control > Global Password approach as documented here: https://docs.aws.amazon.com/amplify/latest/userguide/access-control.html

I configured a username and password which resulted in an automatic redeploy of my app. When I attempted to access my app's URL it immediately prompted me to input my username and password which is great. However, with every network request sent to the app URL from my browser, I'm having to input my credentials again. This happens for every page refresh, image request, asset request, etc.. Seems that either my app is designed incorrectly resulting in a refresh of this authentication OR there's simply something buggy with AWS Amplify's Access Control approach. For now I'm assuming the issue is with my app.

Any feedback on this issue would be appreciated. Thank you in advance.

Answer

Hello,

Thank you for reaching out to us.

When you enable password protection for your Amplify app, it usually does not ask for a password for each page refresh, image request, asset request, etc.

This could be an issue with your app or the browser. I would request to kindly try accessing the domain from a different browser (or) clearing the browser cache and check if you are facing the same issue.

If the issue still persists, we would require further details from your end which are non-public information, like your Amplify app id and a HAR capture in order to investigate this issue further. Hence, please open a support case with AWS Premium Support using the below link and kindly share the necessary details so that we can further investigate this issue and find the root cause.

[+] AWS Premium Support: https://aws.amazon.com/premiumsupport/

[+] Create a case: https://support.console.aws.amazon.com/support/home#/case/create

Why am I prompted for username & password with every request to my AWS Amplify app?

Relevant content