You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Replace incorrect TOTP fragment with InlineFilter
* Add missing Android docs to Sign In Next Steps
* Fix indentation in RxJava sample
* Use consistent naming for example string
* Use InlineFilters to populate correct variable names for Android
---------
Co-authored-by: timngyn <timngyn@gmail.com>
Copy file name to clipboardExpand all lines: src/fragments/lib/auth/common/mfa/flows.mdx
+84-2Lines changed: 84 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -219,13 +219,23 @@ You can use Time-based One-Time Password (TOTP) for multi-factor authentication
219
219
220
220
### Setting up TOTP for a user
221
221
222
+
<InlineFilterfilters={['android']}>
223
+
After you initiate a user sign in with the `signIn` API where a user is required to set up TOTP as an MFA method, the API call will return `CONTINUE_SIGN_IN_WITH_TOTP_SETUP` as a challenge and next step to handle in your app. You will get that challenge if the following conditions are met:
224
+
</InlineFilter>
225
+
<InlineFilterfilters={['swift', 'flutter']}>
222
226
After you initiate a user sign in with the `signIn` API where a user is required to set up TOTP as an MFA method, the API call will return `continueSignInWithTOTPSetup` as a challenge and next step to handle in your app. You will get that challenge if the following conditions are met:
227
+
</InlineFilter>
223
228
224
229
- MFA is marked as **Required** in Cognito User Pool.
225
230
- TOTP is enabled in the Cognito User Pool
226
231
- User does not have TOTP MFA set up already.
227
232
233
+
<InlineFilterfilters={['android']}>
234
+
The `CONTINUE_SIGN_IN_WITH_TOTP_SETUP` step signifies that the user must set up TOTP before they can sign in. The step returns an associated value of type `TOTPSetupDetails` which must be used to configure an authenticator app like Microsoft Authenticator or Google Authenticator. `TOTPSetupDetails` provides a helper method called `getSetupURI` which generates a URI that can be used, for example, in a button to open the user's installed authenticator app. For more advanced use cases, `TOTPSetupDetails` also contains a `sharedSecret` which can be used to either generate a QR code or be manually entered into an authenticator app.
235
+
</InlineFilter>
236
+
<InlineFilterfilters={['swift', 'flutter']}>
228
237
The `continueSignInWithTOTPSetup` step signifies that the user must set up TOTP before they can sign in. The step returns an associated value of type `TOTPSetupDetails` which must be used to configure an authenticator app like Microsoft Authenticator or Google Authenticator. `TOTPSetupDetails` provides a helper method called `getSetupURI` which generates a URI that can be used, for example, in a button to open the user's installed authenticator app. For more advanced use cases, `TOTPSetupDetails` also contains a `sharedSecret` which can be used to either generate a QR code or be manually entered into an authenticator app.
238
+
</InlineFilter>
229
239
230
240
Once the authenticator app is set up, the user can generate a TOTP code and provide it to the library to complete the sign in process.
If multiple MFA methods are enabled for the user, the `signIn` API will return `CONTINUE_SIGN_IN_WITH_MFA_SELECTION` as the next step in the auth flow. During this scenario, the user should be prompted to select the MFA method they want to use to sign in and their preference should be passed to `confirmSignIn`.
614
+
</InlineFilter>
615
+
<InlineFilterfilters={['swift', 'flutter']}>
602
616
If multiple MFA methods are enabled for the user, the `signIn` API will return `continueSignInWithMFASelection` as the next step in the auth flow. During this scenario, the user should be prompted to select the MFA method they want to use to sign in and their preference should be passed to `confirmSignIn`.
0 commit comments