Aws cognito user domain - Invalid_Request

Question

I created a user pool and set up a domain with application client settings () for registering and registering pages in cognitively. When I tried to use a URL similar to -

https://myDomain.auth.us-east-1.amazoncognito.com/login?response_type=code&client_id=fkjfkasjfkasjfdweinfskfsfsfnk&redirect_uri=https://google.com

in the browser I am redirected to

https://myDomain.auth.us-east-1.amazoncognito.com/error?error=invalid_request#

Note. I tried using Cognito User Pool and Facebook listing providers without activating OAuth2.

Did I miss something?

Answer 1

It works for me with the following user pool settings.

App integration App client settings Enabled Identity Providers ☑ Facebook ☑ Cognito User Pool Callback URL(s) https://google.com OAuth 2.0 Allowed OAuth Flows ☑ Authorization code grant ☐ Implicit grant ☐ Client credentials Allowed OAuth Scopes ☐ phone ☐ email ☑ openid ☐ aws.cognito.signin.user.admin ☐ profile 

Answer 2

Enable the Authorization code grant the Allowed OAuth Flows section of the AppClientSettngs tab

Change redirect_uri as

https://myDomain.auth.us-east-1.amazoncognito.com/login?response_type=code&client_id=fkjfkasjfkasjfdweinfskfsfsfnk&redirect_uri=https://myDomain.auth.us-east-1.amazoncognito.com

It worked for me

Answer 3

You are doing everything right from what you described, but you should check the following:

• Have you added https://google.com to your app client setup as a callback URL?

• Have you checked your provider Enabled Identity Providers ?

• In Allowed OAuth Flows you should check the "Grant for Authorization Code".