AWS cognito

gistfile1.txt

Navigate to AWS cognito and choose an option Manage user pools to view all existing cognito services.

Click on Create a user pool to create new cognito service 

Section 1: Name
Enter a pool name. For ex. dreamplan and select option step through settings to manually select steps.

Section 2: Attributes
Select an option Email address or phone number to use email address or phone number as their "username" to sign up and sign in.

1. select option Allow Email Address
2. check option (Recommended) Enable case insensitivity for username input
3. select Email as required standard attributes
4. Add new custom attribute with values Type:string, Name:custom:client, Min length:1, Max length:1024, Mutable:yes

Section 3: Policies 

1. set Minimum password length to 8 and check all the required fields.
2. choose an option Allow users to sign themselves up 
3. Enter 7 days for temporary password expires if the password is not used.

Section 4: MFA and verifications

1. Turn off Multi-Factor Authentication (MFA)
2. For account recovery select Email if available, otherwise phone, but don’t allow a user to reset their password via phone if they are also using it for MFA
3. To retrieve a code from their email select option email 
4. select already selected name in Role field 

Section 5: Message Customization

1. Enter From email ID [email protected]
2. Use Amazon SES for email ID configuration 
3. Choose verification type as link to verify email address
4. Enter email subject name for ex. Dreamplan - Email Verification and description of email in email verification
5. Enter email subject name Dreamplan - Credentials for user invitation message
Skip section tags and devices.

Section 6: App clients

1. Enter app client name. For ex. Dreamplan
2. Set Refresh token expiration:30 days, Access token expiration: 60 minutes and ID token expiration: 60 minutes.
3. Select all the checkboxes in Auth Flows Configuration
4. Enable Security configuration
5. The app client id and secret will be available after you save this user pool. 
6. Do not check Generate client secret checkbox

set triggers to None and create domain name for email

User pool created successfully. 

Once pool is created successfully, Change userPoolId and userPoolWebClientId in file pages/aws-amplify-auth-config.js

Try to signup and send verification email from website.