AdminDeleteUser 500 error

[natflow]

I'm getting a 500 error when I use the admin-delete-user command.

Here's the relevant portion of the logs from the admin-delete-user call:

[1641851096375] DEBUG: f2c89585 AdminDeleteUser start {"reqId":"f2c89585","target":"AdminDeleteUser"}
[1641851096375] DEBUG: f2c89585 AdminDeleteUser CognitoServiceImpl.getUserPool {"reqId":"f2c89585","target":"AdminDeleteUser","userPoolId":"local_0KNMJFrL"}
[1641851096375] DEBUG: f2c89585 AdminDeleteUser UserPoolServiceImpl.create {"reqId":"f2c89585","target":"AdminDeleteUser","id":"local_0KNMJFrL"}
[1641851096375] DEBUG: f2c89585 AdminDeleteUser createDataStore {"reqId":"f2c89585","target":"AdminDeleteUser","id":"local_0KNMJFrL"}
[1641851096375] DEBUG: f2c89585 AdminDeleteUser Using cached data store {"reqId":"f2c89585","target":"AdminDeleteUser","id":"local_0KNMJFrL"}
[1641851096376] DEBUG: f2c89585 AdminDeleteUser DataStore.get {"reqId":"f2c89585","target":"AdminDeleteUser","key":"Options"}
[1641851096377] DEBUG: f2c89585 AdminDeleteUser UserPoolServiceImpl.getUserByUsername {"reqId":"f2c89585","target":"AdminDeleteUser","username":"[email protected]"}
[1641851096377] DEBUG: f2c89585 AdminDeleteUser DataStore.get {"reqId":"f2c89585","target":"AdminDeleteUser","key":["Users","[email protected]"]}
[1641851096377] DEBUG: f2c89585 AdminDeleteUser UserPoolServiceImpl.deleteUser {"reqId":"f2c89585","target":"AdminDeleteUser","username":"[email protected]"}
[1641851096377] DEBUG: f2c89585 AdminDeleteUser DataStore.delete {"reqId":"f2c89585","target":"AdminDeleteUser","key":["Users","[email protected]"]}
[1641851096377] ERROR: f2c89585 NONE Error handling target: AdminDeleteUser {"reqId":"f2c89585"}
    error: {}
[1641851096378] DEBUG: f2c89585 NONE request errored {"reqId":"f2c89585","req":{"id":"f2c89585","method":"POST","url":"/","query":{},"params":{},"headers":{"host":"localhost:9229","accept-encoding":"identity","x-amz-target":"AWSCognitoIdentityProviderService.AdminDeleteUser","content-type":"application/x-amz-json-1.1","user-agent":"aws-cli/2.4.2 Python/3.9.9 Darwin/21.2.0 source/arm64 prompt/off command/cognito-idp.admin-delete-user","x-amz-date":"20220110T214456Z","authorization":"AWS4-HMAC-SHA256 Credential=fake/20220110/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=d28b5aa69f7ab8c9692a88f858ab12020a909631d8396aaa502c6c6fb4f69d47","content-length":"64"},"remoteAddress":"127.0.0.1","remotePort":53416},"res":{"statusCode":500,"headers":{"x-powered-by":"Express","access-control-allow-origin":"*","content-type":"application/json; charset=utf-8","content-length":"2","etag":"W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\""}},"responseTime":4}
    err: {
      "type": "Error",
      "message": "failed with status code 500",
      "stack":
          Error: failed with status code 500
              at ServerResponse.onResFinished (/Users/natflowers/devel/cognito-local-admin-delete-user/node_modules/pino-http/logger.js:98:40)
              at ServerResponse.emit (node:events:402:35)
              at ServerResponse.emit (node:domain:475:12)
              at onFinish (node:_http_outgoing:830:10)
              at callback (node:internal/streams/writable:552:21)
              at afterWrite (node:internal/streams/writable:497:5)
              at afterWriteTick (node:internal/streams/writable:484:10)
              at processTicksAndRejections (node:internal/process/task_queues:82:21)
    }

An error occurred (500) when calling the AdminDeleteUser operation (reached max retries: 2):

My versions:

• MacOs 12.1
• Node version 16.13.1
• Yarn version 1.22.17
• cognito-local version 3.13.0 -- I have not tried with the latest commit on master

See my repo for a complete minimal example: https://github.com/natflow/cognito-local-admin-delete-user

Any ideas what might be happening?

[jagregory]

Thanks for raising this issue and providing an example. I'll test it locally and see what I can discover.

[jagregory]

Hey @natflow, I don't have happy news yet but I'm getting there. There's a few issues this has highlighted:

1. The error logging isn't actually logging errors 😐
2. The actual error you're getting is because the underlying storage engine is treating the .'s in your username as JSONPath segments, so it's trying to delete an object at ["Users", "user@example", "com"] which is obviously incorrect.
3. The above is happening because the admin-create-user functionality isn't correctly handling email addresses as usernames. I've ran some tests against the real Cognito and when you create a user with an email address as a Username in a pool with email as a UsernameAttribute, Cognito puts the user supplied Username into the email attribute and sets the Username to the generated Sub UUID. Cognito Local does not do this currently.

I'll work through these issues ASAP.

Possible workarounds in the meantime:

1. Delete the user manually in the JSON and restart your Cognito Local server
2. Edit the JSON, replace the key in the Users object with the Sub attribute (instead of email address)

[jagregory]

Actually I found a quick fix for your issue @natflow. This doesn't resolve the underlying issue of why emails are being stored as usernames, but it should address your immediate issue. I'll split the other items out into separate issues and close this.

A release is going through the pipeline now, I think the release bot will post here when it's complete.

[natflow]

@jagregory Thanks! I switched to use moto for my tests so I'm not blocked or anything, but I'll switch back so I could use one thing for both tests and local development.

[github-actions]

🎉 This issue has been resolved in version 3.13.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release
• v3.13.1

Your semantic-release bot 📦🚀