Problem/Motivation

1. Installed Cognito on a D8.9.14 site.

2. Set up my settings.php file.

3. use a user/password pair from cognito (never before seen on the site). (we know the username/pass works)

4. receive the following error message -->

Unable to verify secret hash for client _the correct client_id value here_

...

So, I know its reading the settings... and I'm guessing it is talking to AWS.

No errors show up in the drupal error logs.

Proposed resolution

I'm looking for help getting past this error.

Thank you!

Comments

alphex created an issue. See original summary.

alphex’s picture

alphex commented

Closing.
we regenerated the app.

alphex’s picture

alphex commented
Status: Active » Closed (works as designed)

closed

ttbakiatwoam’s picture

ttbakiatwoam commented

what do you mean you rebuilt the app? are you referring to AWS Cognito? Also did you rebuild your app with a client secret?

ttbakiatwoam’s picture

ttbakiatwoam commented

I missed the readme setup step 9 in our Cognito configuration... which caused this error for us.

SETUP IN AWS
------------

Step 1: Create AWS key and secret
1. Go to https://console.aws.amazon.com/iam/home?#/security_credential
2. Create new key and secret from the "Access keys (access key ID and secret
access key)" tab

Step 2: Creating user pool and app
1. Go to https://eu-central-1.console.aws.amazon.com/cognito/home
2. Go to manage your user pools
3. Create a user pool
4. Choose "Step through the settings"
5. Select "Email address or phone number"
6. Make "Email" required
7. Go through the next steps using default settings until you reach the create
an app step
8. Add a new app
9. Uncheck "Generate client secret"
10. Check "Enable sign-in API for server-based authentication
(ADMIN_NO_SRP_AUTH)"
11. Create app
12. Go through the next steps and create pool

Step 3: Get the user pool id and client id
1. Get the User pool id from the "General Settings" tab of your user pool to
place inside your settings.php (see below)
2. Get the client id from from the "App clients" tab of your user pool to place
inside your settings.php (see below)