Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(auth): Add Passwordless features to Amplify #2952

Merged
merged 10 commits into from
Nov 27, 2024
Merged

Conversation

mattcreaser
Copy link
Member

  • PR title and description conform to Pull Request guidelines.

Issue #, if available:

Description of changes:
This PR adds support for Cognito's new Passwordless Sign In Flows.

This includes the following new functionality for the Auth category:

  • Passwordless Sign-Up using a One Time Passcode (OTP) sent to a user's email address or SMS number
  • Auto-Sign In feature to sign in directly after signing up, without needing to re-enter the user's information
  • New USER_AUTH flow that can be used to sign in with any of the following mechanisms
    • Password & Password SRP
    • Email OTP
    • SMS OTP
    • WebAuthn
  • WebAuthn credential management APIs
    • Register device as a WebAuthn credential, allowing user to sign in with biometrics
    • List the registered WebAuthn credentials for the current user
    • Remove a registered WebAuthn credential

Please see the associated docs PR for a more comprehensive overview of these new features.

How did you test these changes?

  • Integration tests
  • Unit tests
  • Manual verification

Documentation update required?

General Checklist

  • Added Unit Tests
  • Added Integration Tests
  • Security oriented best practices and standards are followed (e.g. using input sanitization, principle of least privilege, etc)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@mattcreaser
Copy link
Member Author

This PR is pending the AWS Kotlin SDK release later today

@vincetran vincetran marked this pull request as ready for review November 27, 2024 00:23
@vincetran vincetran requested review from a team as code owners November 27, 2024 00:23
Copy link
Member

@edisooon edisooon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎊

@vincetran vincetran merged commit 5f9a3bc into main Nov 27, 2024
4 checks passed
@vincetran vincetran deleted the feat/passwordless branch November 27, 2024 00:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants