Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for 'PreventUserExistenceErrors' #4214

Closed
hisham opened this issue May 11, 2020 · 2 comments
Closed

Add support for 'PreventUserExistenceErrors' #4214

hisham opened this issue May 11, 2020 · 2 comments
Assignees
Labels
auth Issues tied to the auth category of the CLI feature-request Request a new feature

Comments

@hisham
Copy link
Contributor

hisham commented May 11, 2020

Cognito supports this setting (PreventUserExistenceErrors) which will prevent cognito from disclosing to the frontend whether a user exists in the userpool or not.

Does not look like amplify cli supports this setting. It can be added in the cloudformation file manually but the cli will reset it if 'amplify update auth' is run.

@jhockett jhockett added the pending-triage Issue is pending triage label May 11, 2020
@UnleashedMind UnleashedMind added enhancement auth Issues tied to the auth category of the CLI pending-review Pending review from core-team and removed pending-triage Issue is pending triage labels May 12, 2020
@LoganArnett
Copy link

Is this underway or can I open a PR for this?

@josefaidt
Copy link
Contributor

Hey 👋 this can now be accomplished with the use of overrides! Using the following override we are able to enable PreventUserExistenceErrors

import { AmplifyAuthCognitoStackTemplate } from '@aws-amplify/cli-extensibility-helper'

export function override(resources: AmplifyAuthCognitoStackTemplate) {
  resources.userPoolClient.addPropertyOverride(
    'PreventUserExistenceErrors',
    'ENABLED'
  )
}

image

Closing issue 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auth Issues tied to the auth category of the CLI feature-request Request a new feature
Projects
None yet
Development

No branches or pull requests

6 participants