sub attribute on Cognito Pre Sign Up lambda

I'd like to have access to the sub attribute on the pre-sign-up trigger function when customer is signin up with external IdP. Will this be possible in the near future?

Use case is that the authorization layer of the application is handled in the backend, so I need to insert the user to database in the sign up process.

主题

安全、身份和合规性

标签

Amazon Cognito 亚马逊 Cognito 联合身份

语言

English

teemu

已提问 2 年前1162 查看次数

1 回答

最新
投票最多
评论最多

已接受的回答

Hi,

SUB is not available in pre-signup trigger because the user hasn't been created at this stage (it is "pre" sign-up, meant for validation to decide whether to allow the sign-up to continue or reject the request). If you want to propagate the SUB to backend you should use PostConfirmation trigger for this, this will be triggered after the user has been created and confirmed.

专家

Mahmoud Matouk

已回答 2 年前

teemu
2 年前
Thanks for the quick reply.

Does post confirmation trigger execute before the authentication flow is complete? We need the user to be present in the database before user is redirected back to the frontend after the sign up?
teemu
2 年前
I did some experimentation and post confirmation is indeed part of the external provider sign up flow. That solves the issue, thanks! The documentation could be more clear on this though.

Noted also that when using adminCreateUser, the post confirmation doesn't trigger. I can imagine there would be many use cases for using a trigger which runs every time after the user has been created to the pool, no matter which way the creation happened.

sub attribute on Cognito Pre Sign Up lambda

相关内容