Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

set_new_password_challenge() raises NotAuthorizedException for clients with secret #73

Open
dmder opened this issue Nov 28, 2017 · 1 comment

Comments

@dmder
Copy link

dmder commented Nov 28, 2017

challenge_response = {

When I call set_new_password_challenge() for the Cognito client, which does have a client_secret, it fails with botocore.errorfactory.NotAuthorizedException: ... Unable to verify secret hash for client <client_id>. This is due to the fact that "SECRET_HASH" attribute is missing in challenge_response dictionary. After adding SECRET_HASH authentication flow succeedes.

@armicron armicron self-assigned this Nov 28, 2017
@armicron armicron removed their assignment Dec 14, 2017
@J-Rojas
Copy link

J-Rojas commented Mar 23, 2018

I can confirm this.

PR with a fix is here
#93

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants