Amplify-js: invalid_client error using authorization_grant flow

Created on 19 Nov 2019 · 2Comments · Source: aws-amplify/amplify-js

Describe the bug
Using amplify hosted UI I get an 'invalid_client' error from cognito when trying to login using a SAML provider.

To Reproduce
Steps to reproduce the behavior:

Configure a SAML provider for a user pool
Set up amplify for react native
Login using hostedUISignIn()
See error

Expected behavior
Successful login

I get an invalid_client error which suggests, from experience/docs, that the clientId is mismatched with that configured in cognito.

Smartphone (please complete the following information):

Device: iPhone 11 Pro
OS: iOS 13.2
Browser Safari

Additional context
Using token as the response type works, but then i don't get a refresh token.

to-be-reproduced

Source

anthonyhumphreys

Most helpful comment

Turns out this was a problem because the user pool pp client had been created (in terraform) using a client secret. Changing this to false fixed the issue. Could this be made clearer in the docs?

anthonyhumphreys on 20 Nov 2019

👍4

All 2 comments

Turns out this was a problem because the user pool pp client had been created (in terraform) using a client secret. Changing this to false fixed the issue. Could this be made clearer in the docs?

anthonyhumphreys on 20 Nov 2019

👍4

Because I looked for it for a while!
In your Cognito User Pool:
User_Pools_-_Amazon_Cognito