fix(auth): Custom auth with device tracking, no SRP (#3652)

The fix in #3558 assumed that device SRP would only be performed when password SRP had previously been performed as part of a custom Auth workflow. However, this is not true. In custom auth workflows without password SRP, device SRP can still be required when device tracking is enabled, and in this case it is not a requirement that password SRP have been previously performed.
aws-amplify · Aug 31, 2023 · 0e99647 · 0e99647
1 parent fca9d4d
commit 0e99647
Show file tree

Hide file tree

Showing 3 changed files with 297 additions and 262 deletions.
diff --git a/infra/lib/stack.ts b/infra/lib/stack.ts
@@ -252,10 +252,17 @@ export class AmplifyFlutterIntegStack extends cdk.Stack {
       {
         associateWithWaf,
         type: "FULL",
-        environmentName: "custom-auth-device-srp",
+        environmentName: "custom-auth-device-with-srp",
         customAuth: "WITH_SRP",
         deviceTracking: deviceTrackingAlways,
       },
+      {
+        associateWithWaf,
+        type: "FULL",
+        environmentName: "custom-auth-device-without-srp",
+        customAuth: "WITHOUT_SRP",
+        deviceTracking: deviceTrackingAlways,
+      },
       {
         associateWithWaf,
         type: "FULL",