Allow to use confirmUserAttribute without active session

[oemer-aran]

Is this related to a new or existing framework?

No, it's just JavaScript.

Is this related to a new or existing API?

Authentication

Is this related to another service?

No response

Describe the feature you'd like to request

When calling sendUserAttributeVerificationCode({ userAttributeKey: "email" }) it would be more ideal to verify the user without an active session. However, confirmUserAttribute expects and accessToken in the session to work.
It's usually possible to click on the button in an email to verify it, without the need to being authenticated.

Describe the solution you'd like

Instead of accessToken a username parameter should be enough to verify the email.
So instead of:

// uses accesToken internally from the current session to map it to the correct user
await confirmUserAttribute(
    userAttributeKey: 'email',
    confirmationCode:: 123456,
  );

It should work like

// doesn't need accessToken to work
await confirmUserAttribute(
    userAttributeKey: 'email',
    username: 'my@email.de'
    confirmationCode:: 123456,
  );

Describe alternatives you've considered

You could use admin actions for that, but I want to avoid it when possible.

Additional context

I am using aws-amplify only with custom JavaScript, no Hosted UI or pre-made components from amplify.

Is this something that you'd be interested in working on?

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

[josefaidt]

Hey @oemer-aran 👋 thanks for raising this! Can you expand on the use case you're looking to address? Are you wanting to automatically confirm email addresses on signup?

[josefaidt]

Hey @oemer-aran I wanted to follow-up here and see if this is something you're still looking in to?

[cwomack]

Closing this issue as we have not heard back from you. Please feel free to reply back and provide any information previously requested and we'd be happy to re-open the issue.

Thank you!