amplify-js: Cognito hosted UI federatedSignIn not working with react native:- "Error in cognito hosted auth response Error: invalid_request"

I am also getting the same issue even successful login using google federation. OAuth - Error handling auth response., [Error: invalid_grant]

“aws-amplify”: “^1.2.2”, “aws-amplify-react”: “^2.5.2”, “aws-amplify-react-native”: “^2.2.2”,

I am still getting this error in Angular JS with the latest amplify (I got this in v2 also).

However, this only happen in the first attempt. The failing network request has the following params;

grant_type: authorization_code
code: <CODE>
client_id: <CODE>
redirect_uri: https://www.vinyl.lk/

The successful token request has;

grant_type: authorization_code
code: <CODE>
client_id: <CODE>
redirect_uri: https://www.vinyl.lk/
code_verifier:  <CODE>

Anyone having the same problem?

I submitted a PR #3576, lets see what the maintainers say.

I have the same error. Before everything was worked fine.

I have same issue with responseType: 'code'. But it can work with responseType: 'token'. I have question, since there is no refresh token so we need to execute Auth.federatedSignIn() when the access token is expired, right ?

I checked one more thing: when responseType: 'token' and you will check Implicit grant in options it works fine but the docs says that there is no auto refreshing of token this way -> temporary solution for developing

I’m also experiencing the same issue @anuradhawick. in my react project. For some reason, the call to get /token is executed twice. even though I have Amplify.configure(awsExports); set up once in the entire app. I’m using the latest version of amplify "aws-amplify": "^3.0.20",

With a custom auth UI

There’s a lot of similar issue floating around #3642 #3185 (comment) #6041 #5829 #6172

Any chance you resolved the issue?

Add my issue to that list:

7364

I upgraded @aws-amplify/auth from 3.2.3 to 3.3.1 and now I’m getting this error.

EDIT: after I upgraded, I got an error that said “scope must be a String Array”. I’m loading the scope from a .env file, so I just call .split(' ') on the string. That worked, but now I get the invalid_scope error.

EDIT 2: I removed the call to split and changed scope to scopes (plural) and now everything works on the latest version.

@iamdavidmartin Never mind, I just upgraded my aws-amplify library to 1.1.31-unstable.5 version after @manueliglesias fix and it is now working for me

Thanks @manueliglesias

@iamdavidmartin I am still getting the error with 1.1.30 version of aws-amplify library

[Unhandled promise rejection: Error: invalid_request]

• node_modules/@aws-amplify/auth/lib/OAuth/OAuth.js:143:44 in <unknown>
• node_modules/@aws-amplify/auth/lib/OAuth/OAuth.js:52:27 in step
• … 11 more stack frames from framework internals

@ltankey When the user logs in initially, everything works fine. On subsequent app reloads I have the same problem as you do: signIn_failure and cognitoHostedUI_failure. However, the user is still authenticated.

Like you said, really strange. At this time, I’m moving on with other development and I’ll come back to this in a while hoping that there’s been some resolution.

Same here. Using this config file :

const awsmobile ={
  "aws_appsync_region": "ap-southeast-2",
  Auth: {
    identityPoolId: "...",
    region: "...",
    userPoolId: "...",
    userPoolWebClientId: "...",
  },
  oauth : {
    domain : '...',
    scope : [ 'aws.cognito.signin.user.admin'],
    redirectSignIn : 'myapp://signin',
    redirectSignOut : 'myapp://signout',
    responseType: 'code'
  }
};

export default awsmobile;

When I use Auth.federatedSignIn({provider: 'Google'}); and enabling DEBUG log level I get these errors :

'[DEBUG] 10:21.378 OAuth - Calling token endpoint:
 https://magnyv5-domain.auth.ap-southeast-2.amazoncognito.com/oauth2/token with', { grant_type: 'authorization_code',
   code: 'a17c40d4-1a3f-47f4-b67c-7915d649101b',
   client_id: '.....',
   redirect_uri: 'myapp://signin',
   code_verifier: 'RDoPZ0ZfThCD8HJGMHn2RbwiLpERnnARSXHIwDAT7L2laDls09G6R1bpTNGuNn3KgRPolty2tMCXKBbiypb2FriyVmZbhtzqdnlAmo8TQsF6mneV5obZjwRCpeB49Ay6' }
 '[DEBUG] 10:22.190 AuthClass - Error in cognito hosted auth response', { [Error: invalid_request]
   line: 175806,
   column: 32,
   sourceURL: 'http://localhost:8081/index.delta?platform=android&dev=true&minify=false' }
 '[DEBUG] 10:22.331 Hub - Dispatching to auth with ', { event: 'signIn_failure',
   data:
    { [Error: invalid_request]
      line: 175806,
      column: 32,
      sourceURL: 'http://localhost:8081/index.delta?platform=android&dev=true&minify=false' },
   message: 'The OAuth response flow failed' }
 '[DEBUG] 10:22.335 Analytics - on hub capsule auth', { event: 'signIn_failure',
   data:
    { [Error: invalid_request]
      line: 175806,
      column: 32,
      sourceURL: 'http://localhost:8081/index.delta?platform=android&dev=true&minify=false' },
   message: 'The OAuth response flow failed' }

If I take the params from the above log and use them in postman, It just works fine and return accessToken,refreshToken . So it seems an amplify problem and not hosted ui.

UPDATE

Works when you disable ‘remote debugger’! Somehow it interfere the Hub module’s listening to events.

@jordanranz @powerful23 do you have any explanation for this?

Confirm with react-native up to 0.58.*

But have to notice that for react-native >= 0.59.0 “Error: invalid_request” happens all time. !