IssueRaiser

Custom scopes in access token programmatically

**Describe the bug** Impossible to get access tokens with custom scopes without using the [hosted web ui](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html). Authentication through the [amplify drop-in UI](https://aws-amplify.github.io/docs/android/authentication#drop-in-auth) for both Android and iOS -- used in the [android-sdk-auth example](https://github.com/awslabs/aws-sdk-android-samples/tree/master/AmazonCognitoAuthDemo) -- or through [cognito auth sdk](https://docs.aws.amazon.com/cognito/latest/developerguide/tutorial-integrating-user-pools-android.html) always returns (the single scope) *aws.cognito.signin.user.admin* even if it is disabled on the app client settings. **To Reproduce** Steps to reproduce the behavior: 1.Follow the [android (or iOS)-sdk-auth example](https://github.com/awslabs/aws-sdk-android-samples/tree/master/AmazonCognitoAuthDemo); 2. Create custom scope and enable on app client settings; 3. Sign-in in the app, grab the access token and check the scopes in [jwt.io](jwt.io) **Which AWS service(s) are affected?** AWS Cognito (in all SDKs) and AWS API Gateway **Expected behavior** Access token should return custom scope(s), regardless of using the web ui. **Screenshots** <img width="689" alt="scopes" src="https://user-images.githubusercontent.com/3160657/52168249-bc695580-271f-11e9-9fd7-c8c4ee65d064.png"> **Environment(please complete the following information):** - Latest SDK versions (of both cog

Posted by rscmendes on Feb 2, 2019, 7:28 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.4,000 issues0 comments

ux (SaaS)

Custom scopes in access token programmatically

rscmendesFeb 2, 2019, 7:28 PM

**Describe the bug** Impossible to get access tokens with custom scopes without using the [hosted web ui](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html). Authentication through the [amplify drop-in UI](https://aws-amplify.github.io/docs/android/authentication#drop-in-auth) for both Android and iOS -- used in the [android-sdk-auth example](https://github.com/awslabs/aws-sdk-android-samples/tree/master/AmazonCognitoAuthDemo) -- or through [cognito auth sdk](https://docs.aws.amazon.com/cognito/latest/developerguide/tutorial-integrating-user-pools-android.html) always returns (the single scope) *aws.cognito.signin.user.admin* even if it is disabled on the app client settings. **To Reproduce** Steps to reproduce the behavior: 1.Follow the [android (or iOS)-sdk-auth example](https://github.com/awslabs/aws-sdk-android-samples/tree/master/AmazonCognitoAuthDemo); 2. Create custom scope and enable on app client settings; 3. Sign-in in the app, grab the access token and check the scopes in [jwt.io](jwt.io) **Which AWS service(s) are affected?** AWS Cognito (in all SDKs) and AWS API Gateway **Expected behavior** Access token should return custom scope(s), regardless of using the web ui. **Screenshots** <img width="689" alt="scopes" src="https://user-images.githubusercontent.com/3160657/52168249-bc695580-271f-11e9-9fd7-c8c4ee65d064.png"> **Environment(please complete the following information):** - Latest SDK versions (of both cog

Comments (0)

No comments yet. Start the discussion.

Comment on this issue