Skip to content
This repository has been archived by the owner on Jun 26, 2020. It is now read-only.

Unable to verify secret hash for client #125

Open
jlfabi opened this issue Dec 19, 2017 · 5 comments
Open

Unable to verify secret hash for client #125

jlfabi opened this issue Dec 19, 2017 · 5 comments

Comments

@jlfabi
Copy link

jlfabi commented Dec 19, 2017

I am trying the project using my own User Pool. I am getting the following error:

Unable to verify secret hash for client "xxxxxxxx"

Is that a application issue or a User Pool configuration issue?

Thanks.

@RafPe
Copy link

RafPe commented Dec 19, 2017

When creating a new app go ahead without generating a client secret

@alshdavid
Copy link

How do you validate tokens without a secret?

@rellimevad
Copy link

I was wondering the same thing and found that according to https://github.com/aws-amplify/amplify-js/tree/master/packages/amazon-cognito-identity-js (the successor to https://github.com/aws/amazon-cognito-identity-js which is where the register call comes out of):

When creating the App, the generate client secret box must be unchecked because the JavaScript SDK doesn't support apps that have a client secret.

Looks like the AWS console generates a secret by default. If you uncheck 'Generate client secret' or create the app client via CLI or CFN with proper config, you should be good.

@itskgore
Copy link

itskgore commented Apr 7, 2020

I am having a app_secrete with me is it possible to remove the error by passing the app_screte with the authenticateUser function in flutter. If yes please explain.😊

@swanandvg
Copy link

I am also stuck with the same problem as @itskgore

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants