signInWithSocialWebUI not working on 2.1.0 but working on 1.37.5

[JurajBegovac]

Before opening, please confirm:

• I have searched for duplicate or closed issues and discussions.

Language and Async Model

RxJava

Amplify Categories

Authentication

Gradle script dependencies

I use .toml file for dependencies

[versions]
amplify = "2.1.0"

[libraries]
amplify-cognito = { module = "com.amplifyframework:aws-auth-cognito", version.ref = "amplify" }
amplify-core = { module = "com.amplifyframework:core", version.ref = "amplify" }
amplify-rxbindings = { module = "com.amplifyframework:rxbindings", version.ref = "amplify" }

Environment information

------------------------------------------------------------
Gradle 7.6
------------------------------------------------------------

Build time:   2022-11-25 13:35:10 UTC
Revision:     daece9dbc5b79370cc8e4fd6fe4b2cd400e150a8

Kotlin:       1.7.10
Groovy:       3.0.13
Ant:          Apache Ant(TM) version 1.10.11 compiled on July 10 2021
JVM:          11.0.16.1 (Homebrew 11.0.16.1+0)
OS:           Mac OS X 12.6.1 aarch64

Please include any relevant guides or documentation you're referencing

No response

Describe the bug

When I call (e.g.):

signInWithSocialWebUI(AuthProvider.google(), activity)

It works on 1.37.5 but not on 2.1.0.

On 2.1.0 it let me choose google account and then when it was redirected back I get this:

                                          ServiceException{message=invalid_client, cause=ServiceException{message=invalid_client, cause=null, recoverySuggestion=Sorry, we don't have a suggested fix for this error yet.}, recoverySuggestion=Sorry, we don't have a suggested fix for this error yet.}
                                          	at com.amplifyframework.auth.cognito.helpers.HostedUIHttpHelper.parseTokenResponse(HostedUIHttpHelper.kt:102)
                                          	at com.amplifyframework.auth.cognito.helpers.HostedUIHttpHelper.fetchTokens(HostedUIHttpHelper.kt:69)
                                          	at com.amplifyframework.auth.cognito.HostedUIClient.fetchToken(HostedUIClient.kt:119)
                                          	at com.amplifyframework.auth.cognito.actions.HostedUICognitoActions$fetchHostedUISignInToken$$inlined$invoke$1.execute(Action.kt:73)
                                          	at com.amplifyframework.statemachine.ConcurrentEffectExecutor$execute$1$1.invokeSuspend(ConcurrentEffectExecutor.kt:26)
                                          	at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
                                          	at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
                                          	at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:570)
                                          	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
                                          	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:677)
                                          	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:664)
                                          Caused by: ServiceException{message=invalid_client, cause=null, recoverySuggestion=Sorry, we don't have a suggested fix for this error yet.}§

Reproduction steps (if applicable)

No response

Code Snippet

// Put your code below this line.

Log output

// Put your logs below this line

amplifyconfiguration.json

GraphQL Schema

// Put your schema below this line

Additional information and screenshots

No response

[tylerjroach]

Hi @JurajBegovac, I just created a new project to test signInWithSocialWebUI with Google and was able to sign in successfully. V1 Amplify may have been pulling some values from awsconfiguration.json, where v2 pulls exclusively from amplifyconfiguration.json. Can you double check that you have the expected values for your app client and secret, and that they match between the two files?

[JurajBegovac]

Hi, but I don't use amplifyconfiguration.json - I add config manually because I want to dynamically add cognito config.
Like this:

// This is amplify json config where we can have different configs (e.g. for different product flavors)
val CognitoConfig.awsConfigurationJson: String
    get() = """
            {
                "auth":
                {
                    "plugins":
                    {
                        "awsCognitoAuthPlugin":
                        {
                            "Auth":
                            {
                                "Default":
                                {
                                    "authenticationFlowType": "USER_SRP_AUTH",
                                    "OAuth":
                                    {
                                        "AppClientId": "$clientId",
                                        "AppClientSecret": "$clientSecret",
                                        "Scopes":
                                        [
                                            "email"
                                        ],
                                        "SignInRedirectURI": "$signInRedirectURI",
                                        "SignOutRedirectURI": "$signOutRedirectURI",
                                        "WebDomain": "$webDomain"
                                    },
                                    "socialProviders":
                                    [
                                        "GOOGLE",
                                        "APPLE",
                                        "FACEBOOK"
                                    ]
                                }
                            },
                            "CognitoUserPool":
                            {
                                "Default":
                                {
                                    "AppClientId": "$clientId",
                                    "AppClientSecret": "$clientSecret",
                                    "PoolId": "$poolId",
                                    "Region": "$region"
                                }
                            }
                        }
                    }
                }
            }
        """.trimIndent()


// And this is how I initialize amplify
        RxAmplify.addPlugin(AWSCognitoAuthPlugin())
        val amplifyConfig = AmplifyConfiguration.builder(JSONObject(cognitoConfig.awsConfigurationJson))
            .build()
        RxAmplify.configure(amplifyConfig, context)

As I mentioned - it's working like this on v1

[tylerjroach]

@JurajBegovac Thank you for the report. I'm working on a fix now. In scenarios where "AppClientSecret" is required, the required Authorization header is not being attached properly.

[thehoneymad]

I just ran into this one with signInWithWebUI function. Is that due the same reason? :)

[tylerjroach]

@thehoneymad Do you have appSecret being used for hosted UI? If so, this would be the reason. The fix has been merged and will be in an upcoming release.

[thehoneymad]

Yes. I configured an AppSecret for my OAuth client. Should I refrain from it?

[tylerjroach]

@JurajBegovac and @thehoneymad Amplify for Android v2.2.0 has been released with the included fix. Please let me know if this addressed the issue.