Cognito user verification via SNS stopped working?

bnjr — Tue, 22 Aug 2023 18:39:29 +0000

Some time back, AWS started restricting the SMSs sent from SNS service. The restriction is for senders without any Origination IDs aka long code (phone number) or short code. This is basically to stop spammers.

If user verification from Cognito was working before, and it does not now, the reason would be this.

You would see this error in the logs.

For this, you would need to get an Origination ID from AWS Pinpoint.

which takes you here

From there, go to request phone number using this form

This would cost $2/month.

Once this is set up, the verify code should start coming.

Authentication with username, email and phone using AWS Cognito

bnjr — Tue, 10 May 2022 17:42:59 +0000

AWS Amplify comes with authentication services that can be installed via the Amplify CLI as described here.

But the problem with the options that CLI gives is that that one can choose only anyone one of the 4:

username
email
phone
email or phone (this will set to the first logged in option -> either email or phone)

Now as an app developer we would like to give the following options to the user. Ability to login via email or phone (username doesn't makes sense anymore) always.

If Cognito is setup directly without using Amplify then it is possible to do this setup using these options:

Amplify does give you an option to import an existing Cognito User Pool but then the lifecycle, settings and utilities are not available. So you lose some to get some.

But there is a feature that AWS has come up with that can give us best of both.

This feature is the override option. This will generate an override.ts file that will allow one to get into the details of the Cognito options.

So for our requirement of enabling user to login with email and also with phone we would need to add this to the override.ts. And the file would look like this:

import { AmplifyAuthCognitoStackTemplate } from '@aws-amplify/cli-extensibility-helper';

export function override(resources: AmplifyAuthCognitoStackTemplate) {
    resources.userPool.aliasAttributes = ['email', 'phone_number',];
}

With this added, Amplify will build a Cognito User Pool that will have the right sign-in options:

So the sign up would work like this:

const response = await Auth.signUp({
      username: v4(),
      password: password,
      attributes: {
        email: email, //Pass this
        phone_number: phone,// or this
      },
    })

One can add the other attribute e.g. phone like this:

async function addPhone(phone: string) {
  try {
    const user = await Auth.currentAuthenticatedUser()
    const responseUpdate = await Auth.updateUserAttributes(user, {
      phone_number: phone,
    })
    console.log({responseUpdate})
  } catch (error) {
    console.error('error adding phone:', error)
  }
}

and login using phone like this:

async function loginPhone(phone: string) {
  try {
    const authUser = await Auth.signIn(phone, password)
    console.log({authUser})
  } catch (error) {
    console.error('error logging in:', error)
  }
}

Refer to the repo here.
The following functions are available to test out the Cognito User Pool setup:

DEV Community: bnjr

Cognito user verification via SNS stopped working?

Authentication with username, email and phone using AWS Cognito