aws cognito user pool domain - Invalid_Request

Question

I have created a user pool and setup domain with app client settings () to host sign up and sign in pages in the cognito itself. When I tried using the url similar to -

https://myDomain.auth.us-east-1.amazoncognito.com/login?response_type=code&client_id=fkjfkasjfkasjfdweinfskfsfsfnk&redirect_uri=https://google.com

in the browser I am redirected to

https://myDomain.auth.us-east-1.amazoncognito.com/error?error=invalid_request#

Note: I tried using Cognito User Pool and Facebook identity providers without OAuth2 enabled.

Am I missing something?

Answer 1

It works for me with following User Pool settings.

App integration
    App client settings
        Enabled Identity Providers
            ☑ Facebook  ☑ Cognito User Pool
        Callback URL(s)
            https://google.com
        OAuth 2.0
            Allowed OAuth Flows
            ☑ Authorization code grant  ☐ Implicit grant  ☐ Client credentials
        Allowed OAuth Scopes
            ☐ phone  ☐ email  ☑ openid  ☐ aws.cognito.signin.user.admin  ☐ profile

Answer 2

You're doing everything correct from what you've describe, but you should check the following,

• Have you added https://google.com in App Client Setting as Callback URL?

• Have you checked your Identity Provider in Enabled Identity Providers?

• In Allowed OAuth Flows, you must have checked "Authorization Code Grant".