Skip to content

Support all Amazon Cognito OIDC parameters (especially prompt and login_hint)Β #4051

@harsh62

Description

@harsh62

Feature request

Amazon Cognito released support for various OIDC parameters.

Support all the parameters available in the HostedUI's authorization endpoint.

Describe the solution you'd like

To be able to pass login_hint, lang, prompt parameters while calling Amplify.Auth.signInWithWebUI


Reference Doc:

lang
Optional.

The language that you want to display user-interactive pages in. Managed login pages can be localized, but hosted UI (classic) pages can't. For more information, see Managed login localization.

login_hint
Optional.

A username prompt that you want to pass to the authorization server. You can collect a username, email address or phone number from your user and allow the destination provider to pre-populate the user's sign-in name. When you submit a login_hint parameter and no idp_identifier or identity_provider parameters to the oauth2/authorize endpoint, managed login fills the username field with your hint value. You can also pass this parameter to the Login endpoint and automatically fill the username value.

When your authorization request invokes a redirect to OIDC IdPs or Google, Amazon Cognito adds a login_hint parameter to the request to that third-party authorizer. You can't forward login hints to SAML, Apple, Login With Amazon, or Facebook (Meta) IdPs.

prompt
Optional.

An OIDC parameter that controls authentication behavior for existing sessions. Available in the managed login branding version only, not in the classic hosted UI. For more information from the OIDC specification, see Authentication request. The values none and login have an effect on user pool authentication behavior.

Amazon Cognito forwards all values of prompt except none to your IdPs when users select authentication with third-party providers. This is true when the URL that users access includes an identity_provider or idp_identifier parameter, or when the authorization server redirects them to the Login endpoint and they select and IdP from the available buttons.


Linking: #3357

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions