To use MFA do I need to disable client secretion in cognito?

0

I'm implementing MFA authentication in a nodejs back-end application.

Method:

 public async respondToAuthChallenge(payload: RespondToAuthChallengeDto) {
    const params = {
      ClientId: this.clientId,
      ChallengeName: 'SOFTWARE_TOKEN_MFA',
      ChallengeResponses: {
        SOFTWARE_TOKEN_MFA_CODE: payload.mfaCode,
      },
      Session: payload.session
    };    

    return this.cognitoIdentityServiceProvider.respondToAuthChallenge(params).promise();
  }

Respose error:

Client [ID_CLIENT] is configured with secret but SECRET_HASH was not received

But if I add the secret hash I have this error

Unexpected key 'SECRET_HASH' found in params

The problem is that the params of the 'respondToAuthChallenge' method do not have the SecretHash, but my application aware has the secret client enabled. Do I need to disable client secretion to use MFA?

已提问 1 年前52 查看次数
没有答案

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则