Amplify Does Not Use Endpoint for Cognito Auth Calls

[mozakassab]

Description

When configuring Amplify in a Flutter application with existing resources and specifying an Endpoint for CognitoUserPool, the SDK does not route Cognito calls through the provided endpoint. This behavior is unexpected, and was working before with v1.
Here's an example of the configuration passed for existing resources:

String amplifyconfig = ''' {
  "UserAgent": "aws-amplify-cli/2.0",
  "Version": "1.0",
  "auth": {
    "plugins": {
      "awsCognitoAuthPlugin": {
        "IdentityManager": {
          "Default": {}
        },
        "CognitoUserPool": {
          "Default": {
            "PoolId": "${EnvVariables.cognitoUserPoolID.value}",
            "AppClientId": "${EnvVariables.cognitoAppClientID.value}",
            "Region": "${EnvVariables.awsRegion.value}",
            "Endpoint": "${EnvVariables.awsCognitoEndpoint.value}"
          }
        },
        "Auth": {
          "Default": {
            "authenticationFlowType": "CUSTOM_AUTH"
          }
        }
      }
    }
  }
}''';

Categories

• Analytics
• API (REST)
• API (GraphQL)
• Auth
• Authenticator
• DataStore
• Notifications (Push)
• Storage

Steps to Reproduce

1. Configure Amplify with existing resources, and specify an endpoint for CognitoUserPool:

String amplifyconfig = ''' {
  "UserAgent": "aws-amplify-cli/2.0",
  "Version": "1.0",
  "auth": {
    "plugins": {
      "awsCognitoAuthPlugin": {
        "IdentityManager": {
          "Default": {}
        },
        "CognitoUserPool": {
          "Default": {
            "PoolId": "${EnvVariables.cognitoUserPoolID.value}",
            "AppClientId": "${EnvVariables.cognitoAppClientID.value}",
            "Region": "${EnvVariables.awsRegion.value}",
            "Endpoint": "${EnvVariables.awsCognitoEndpoint.value}"
          }
        },
        "Auth": {
          "Default": {
            "authenticationFlowType": "CUSTOM_AUTH"
          }
        }
      }
    }
  }
}''';

2. Add Cognito Auth plugin:

Amplify.addPlugin(
        AmplifyAuthCognito(),
      );

3. Configure Amplify:

Amplify.configure(amplifyconfig);

4. Try calling any Cognito method and check the network logs (Request is not made through the specified Endpoint):

Amplify.Auth.getPlugin(AmplifyAuthCognito.pluginKey).signUp(
        username: username,
        password: password
        );

Screenshots

No response

Platforms

• iOS
• Android
• Web
• macOS
• Windows
• Linux

Flutter Version

3.27.1

Amplify Flutter Version

2.5.0

Deployment Method

Custom Pipeline

Schema

No response

[ekjotmultani]

Hi @mozakassab, thank you for your detail in describing the issue. We will investigate and get back to you when we have an update

[ekjotmultani]

Hi @mozakassab, I looked into it and it seems that, unfortunately, a custom endpoint to route Cognito calls through in the AWSCognitoPlugin is no longer supported as of Gen 2. Is this something that is critical to your application?

[mozakassab]

Hi @ekjotmultani ,thank you for the update. Yes, configuring a custom endpoint is critical for our application. Could you please clarify why this feature is no longer supported in Gen 2? Were there any release notes regarding the discontinuation of this support, and are there any plans to reintroduce the custom endpoint configuration in the future?

[ekjotmultani]

Hi @mozakassab , my apologies that this is such an impact to your application. I am looking into a workaround or some type of solution for this in the meantime.

[ekjotmultani]

Hi @mozakassab, can you try adding
"OAuth": { "WebDomain": "[YOUR COGNITO DOMAIN ]" } after the authenticationFlowType key, under Default

Also to double check, is the custom domain set up with no problems in Cognito for the userpool you are using?

[mozakassab]

Hi @ekjotmultani, thanks for the suggestion! Unfortunately, adding "OAuth": { "WebDomain": "[YOUR COGNITO DOMAIN]" } after the authenticationFlowType key doesn’t solve the issue.

This configuration is used for managed login pages and social logins, which isn’t what I’m trying to do.
What I’m looking for is a way to ensure all Cognito SDK calls are routed through a custom endpoint.

Thanks again!