使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

Can't Sign-In when a device is forgotten in cognito user pool

0

I want to limit multiple session in my web and the best way I found is tracking the devices and forget the device when a new one sign-in but i found the forgotten devices can't sing-in again the reponse of sign-in is Device does not exist. I suppose when you forgot a device and you sign-in again cognito does not have any track of that device and should allow you to sign-in again.

How can solve this? Thanks!

主題
安全性、身分識別與合規
標籤
Amazon Cognito
語言
English
Jorge
已提問 1 年前檢視次數 232 次
2 個答案
1
已接受的答案

Jorge, there is another API call in UpdateDeviceStatus which seems it may doo something similar to what you are mentioning without a permanent removal of the device. https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html

This call uses a "remembered | not_remembered" mechanism that may achieve what you are looking to do.

profile pictureAWS
Keith_AWS
已回答 1 年前
0

Additionally, there are other Device Management API calls that may help find an un-forget your device. https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateDeviceStatus.html https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListDevices.html

profile pictureAWS
Keith_AWS
已回答 1 年前
  • Jorge
    1 年前

    The problem is when I forget a device, AdminListDevices does not return the device forgotten and AdminUpdateDeviceStatus returns "Device does not exist." message if I use the device key forgotten. I liked AdminForgetDevice because it logs out the device you want when you execute it and you don't have to handle a log out method. So it seems I have to handle this logic by my own side. Thanks by the way!

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容