Amplify Drop-In Auth UI without Cognito Identity Pools

[kcwinner]

State your question
Is it possible to use the Amplify Drop-In Auth UI without using federated identities? The IdentityManager requires the CredentialsProvider -> CognitoIdentity region to determine the region at initialization.

I only want to use the drop-in UI with userpools and not actually trade in for federated credentials.

FWIW - we have not had this same result with the iOS drop-in UI.

Which AWS Services are you utilizing?
AWS Cognito UserPools

• com.amazonaws:aws-android-sdk-mobile-client:2.8.+
• com.amazonaws:aws-android-sdk-auth-userpools:2.8.+
• com.amazonaws:aws-android-sdk-auth-ui:2.8.+

Provide code snippets (if applicable)
Potentially use something like this for config:

{
    "UserAgent": "aws-amplify/cli",
    "Version": "0.1.0",
    "IdentityManager": {
        "Default": {}
    },
    "CognitoUserPool": {
        "Default": {
            "PoolId": "us-east-1_xxxxxx",
            "AppClientId": "xxxxxx",
            "AppClientSecret": "xxxxxx",
            "Region": "us-east-1"
        }
    }
}

Environment(please complete the following information):

• SDK Version: 2.8

Device Information (please complete the following information):

• Device: Pixel XL 2
• Android Version: Pie 9.0
• Specific to simulators: N/A

[palpatim]

Hi @kcwinner,

I'll let @minbi chime in with a more educated answer, since my knowledge on this is a bit limited. In the meantime, can you confirm my understanding of your question: you want to use drop-in auth for UserPools authentication, without the requirement of setting up a Cognito Identity Pool as a credentials provider, is that right? Would you be able to set up a Cognito Identity Pool to simply stand in during initialization, even if you never use the credentials it provides?

[kcwinner]

Hello @palpatim !

You are correct in your understanding. I would like to use it without setting up an identity pool. A simple workflow of using a jwt for access with APIG or AppSync is where I am headed.

I actually do have an identity pool I could use. It would be easy enough to create a throw away pool and role with no permissions. Just extra overhead and resources if they aren't really useful.

The other option is abandoning the drop-in UI and managing everything myself.

Edit:
Another unrelated issue I found on accident: drop-in UI does not work with AWS::Cognito::IdentityPoolRoleAttachment rolemappings due to using Basic (classic) auth flow. This may already be known was just adding it FWIW

[minbi]

Hi @kcwinner ,

We are taking this as a feature request and will look into prioritizing this issue.

[minbi]

Hi @kcwinner ,

We have removed the requirement to have a identity pool for showSignIn in version 2.8.5 of the SDK. Please see if this fixes the issue for you.

[minbi]

Hi,

We are closing this issue because there has been no activity. Please feel free to open a new issue if the problem persists. We ask this because closed issues are not actively monitored.

Thanks