We are developing a custom UI for a login form using Amplify. We were able to do it but we are not getting the configured scopes in cognito. We always receive aws.cognito.signin.user.admin even when it not even checked in the config. Same thing we get using boto3 building our our login backend service.
We get the right scopes if we use the hosted UI.
This is what I am finding. How the heck are you supposed to use Cognito then? How does Amazon use this?