Skip to content

Conversation

@mattcreaser
Copy link
Member

Issue #, if available:

Description of changes:
Allows user to complete a sign in via SMS OTP, Email OTP, password, or passkey via the USER_AUTH flow.

How did you test these changes?
(Please add a line here how the changes were tested)

Documentation update required?

  • No
  • Yes TBD

General Checklist

  • Added Unit Tests
  • Added Integration Tests
  • Security oriented best practices and standards are followed (e.g. using input sanitization, principle of least privilege, etc)
  • Ensure commit message has the appropriate scope (e.g fix(liveness): message, fix(authenticator): message, fix(all): message)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Since we can't be sure if the code sent by Cognito is 6 or 8 digits we'll accept both (in client side validation)
@mattcreaser mattcreaser marked this pull request as ready for review November 4, 2025 19:28
@mattcreaser mattcreaser requested review from a team as code owners November 4, 2025 19:28
@mattcreaser
Copy link
Member Author

There are some known issues around inputting an incorrect password. Those will be worked on separately.

@mattcreaser mattcreaser merged commit 7ec52c3 into feat/passwordless Nov 4, 2025
1 check passed
@mattcreaser mattcreaser deleted the mattcreaser/passwordless-signin branch November 4, 2025 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants