Able to sign in, after deleting the user from aws cognito console about amplify-flutter HOT 9 CLOSED

@dineshkumar02 - Thanks for submitting this ticket. Please see the following 3 questions:

1. Does this happen in both Android and iOS?
2. What happens if you attempt to make an authenticated request, say, to the storage category?
3. What happens if you explicitly call signout after deleting the user, but before attempting to re-signin?

from amplify-flutter.

Possibly related: #93

from amplify-flutter.

Hi @haverchuck

I tested only on Android and did not get chance to test it in IOS.

After sign out, when I try to sign in back, then it is not accepting the deleted user details.
The behavior is, once user is signed in, then the subsequent sign in with any password is working.

I think, there is a kind of token which is getting created while the user sign in, and until the token expires, this amplify auth library is letting the users sign in with any password. I think, I forgot to mention the token expire time while sign in?? OR, not sure what the existing behavior is.

--Dinesh

from amplify-flutter.

Hi @dineshkumar02 thanks for brining this issue to our attention. We are looking into it.

from amplify-flutter.

Is there any update on this? Experiencing the same thing.

from amplify-flutter.

It looks like this was marked as a bug that requires a fix in Amplify-Android, but no Amplify-Android issue was linked. I'm marking this as pending triage until we track down what fix is required from Amplify-Android.

from amplify-flutter.

@dineshkumar02 @markpearl - Are you only experiencing this using hosted UI?

I am a little bit confused by the reproduction steps. Are you signing out before calling sign in again? If not, what is the purpose of calling signIn when the user is already signed in?

from amplify-flutter.

@dineshkumar02 @markpearl - If you are still experiencing this issue, please provide the info above so that we can reproduce this. Thanks.

from amplify-flutter.

@Jordan-Nelson ,
I was exploring the amplify with flutter 2 years ago and reported the case which I faced.
Let me close this issue for now, as I understood how the internal auth token works.

What I was doing is like

1. Sigin with cognito user
2. In background, delete the user from aws console
3. Close the application and start it again (Auto sign in happened)

I thought, for the deleted users auto sign in do not work, but it seems the auto sign in
happens based on the token and it's expire time

from amplify-flutter.