Hosted UI

1. Go to Google developer console.

2. Click Select a project

3. Click NEW PROJECT

4. Type in project name and click CREATE

5. Once the project is created, from the left Navigation menu, select APIs & Services, then select Credentials

6. Click CONFIGURE CONSENT SCREEN

7. Click CREATE

8. Type in App Information and Developer contact information which are required field and click SAVE AND CONTINUE three times (OAuth consent screen -> Scopes -> Test Users) to finish setting up consent screen

9. Back to Credentials tab, Create your OAuth2.0 credentials by choosing OAuth client ID from the Create credentials drop-down list. .

10. Choose Web application as Application type and name your OAuth Client.

11. Click Create.

12. Take note of Your client ID and Your Client Secret. You will need them for the next section in the CLI flow.

13. Choose OK.

1. Create a developer account with Amazon.
2. Sign in with your Amazon credentials.
3. You need to create an Amazon security profile to receive the Amazon client ID and client secret. Choose Create a Security Profile.
4. Type in a Security Profile Name, a Security Profile Description, and a Consent Privacy Notice URL.
5. Choose Save.
6. Choose Client ID and Client Secret to show the client ID and secret. You will need them for the next section in the CLI flow.

1. Sign In with your Apple developer credentials.
2. On the main developer portal page, select Certificates, IDs, & Profiles.
3. On the left navigation bar, select Identifier.
4. On the Identifiers page, select the + icon.
5. On the Register a New Identifier page, select App IDs.
6. On the Register an App ID page, under App ID Prefix, take note of the Team ID value.
7. Provide a description in the Description text box and provide the bundleID of the iOS app.
8. Under Capabilities, select Sign in with Apple.
9. Select Continue, review the configuration, and then select Register.
10. On the Identifiers page, on the right, select App IDs, and then select Services ID.
11. Select the + icon and, on the Register a New Identifier page, select Services IDs.
12. Provide a description in the Description text box and provide an identifier for the service id.
13. Continue and register the service id.

1. Go to the Google developer console.

2. On the left navigation bar, look for APIs & Services under Pinned or under More Products if not pinned.

3. Within the APIs and Services sub menu, choose Credentials.

4. Select the client you created in the first step and click the edit button.

5. Type your user pool domain into Authorized Javascript origins.

6. Type your user pool domain with the /oauth2/idpresponse endpoint into Authorized Redirect URIs.

   

   Note: If you saw an error message Invalid Redirect: domain must be added to the authorized domains list before submitting. when adding the endpoint, please go to the authorized domains list and add the domain.

7. Click Save.

1. Sign in with your Amazon credentials.
2. Hover over the gear and choose Web Settings associated with the security profile you created in the previous step, and then choose Edit.
3. Type your user pool domain into Allowed Origins and type your user pool domain with the /oauth2/idpresponse endpoint into Allowed Return URLs.
4. Choose Save.

1. Sign In with your Apple developer credentials.
2. On the main developer portal page, select Certificates, IDs, & Profiles.
3. On the left navigation bar, select Identifiers and then select Service IDs from the drop down list on the right.
4. Select the service id created in Setup your auth provider step above.
5. Enabled Sign In with Apple and select Configure.
6. Under Primary App ID select the app id that was created before.
7. Type your user pool domain into Domains and Subdomains.
8. Type your user pool domain with the /oauth2/idpresponse endpoint into Return URLs.
9. Click Next, review the information, then select Done.
10. On Edit your Services ID Configuration click Continue, review the information, then select Save.
11. On the main Certificates, Identifiers & Profiles, select Keys.
12. On the Keys page, select the + icon.
13. Provide a name for the key under Key Name.
14. Enable Sign in with Apple and select Configure
15. Under Primary App ID select the app id that was created before.
16. Click on Save
17. On Register a New Key click Continue, review the information, then select Register.
18. On the page you are redirected to take note of the Key ID and download the .p8 file containing the private key.

1. Add the following activity to your app's AndroidManifest.xml file, replacing myapp with whatever value you used for your redirect URI prefix:

<activity
    android:name="com.amazonaws.mobile.client.activities.HostedUIRedirectActivity">
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:scheme="myapp" />
    </intent-filter>
</activity>

2. If you previously setup HostedUI for versions between 2.18.0 and 2.23.0, then the only required change is to replace com.amazonaws.mobileconnectors.cognitoauth.activities.CustomTabsRedirectActivity with the updated version (com.amazonaws.mobile.client.activities.HostedUIRedirectActivity). You are no longer required to call the method AWSMobileClient#handleAuthResponse(Intent) in your app.

Note: These versions have known issues with the sign-out flow. Please use the SDK versions 2.24.0 and above.

1. Add the following activity to your app's AndroidManifest.xml file, replacing myapp with whatever value you used for your redirect URI prefix:

<activity
    android:name="com.amazonaws.mobileconnectors.cognitoauth.activities.CustomTabsRedirectActivity">
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:scheme="myapp" />
    </intent-filter>
</activity>

2. Add the following result handler to whichever Activity you are calling HostedUI from:

@Override
protected void onActivityResult(int requestCode, int resultCode, Intent data) {
    super.onActivityResult(requestCode, resultCode, data);
    if (requestCode == AuthClient.CUSTOM_TABS_ACTIVITY_CODE) {
  	    AWSMobileClient.getInstance().handleAuthResponse(data);
    }
}

3. If you previously setup HostedUI for version 2.17.1 or below, remove the intent filter you previously added to your activity in the AndroidManifest.xml file with the URI scheme (e.g. myapp) as well as the onResume() or onNewIntent() handler method you previously added to your Activity.

1. Add myapp:// to your app's Intent filters located in AndroidManifest.xml. The your.package.YourAuthIntentHandlingActivity will be referenced in the next step.

   Copy code example

   <?xml version="1.0" encoding="utf-8"?>
    <manifest xmlns:android="http://schemas.android.com/apk/res/android"
              xmlns:amazon="http://schemas.amazon.com/apk/res/android"
              package="com.amazonaws.mobile.client">
   
       <uses-permission android:name="android.permission.INTERNET"/>
       <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
   
       <application>
           <activity android:name="your.package.YourAuthIntentHandlingActivity">
               <intent-filter>
                   <action android:name="android.intent.action.VIEW" />
                   <category android:name="android.intent.category.DEFAULT" />
                   <category android:name="android.intent.category.BROWSABLE" />
                   <data android:scheme="myapp" />
               </intent-filter>
           </activity>
       </application>
   </manifest>

2. Attach an intent callback so that AWSMobileClient can handle the callback and confirm sign-in or sign-out. This should be in your.package.YourAuthIntentHandlingActivity.

   Copy code example

   @Override
   protected void onResume() {
       super.onResume();
       Intent activityIntent = getIntent();
       if (activityIntent.getData() != null &&
               "myapp".equals(activityIntent.getData().getScheme())) {
           AWSMobileClient.getInstance().handleAuthResponse(activityIntent);
       }
   }