The original poster, xprmnts, is trying to enable a custom login flow using AWS Cognito SSO via passwordless signin on Discourse. They want to replicate the same authentication flow used on their mobile and web app, where users enter their email, receive a verification code, and then sign in without using a password.
xprmnts initially followed steps to enable SSO via AWS Cognito, but encountered issues when trying to implement the custom passwordless auth flow. They shared their desired flow and error messages, seeking guidance on how to achieve this functionality.
pfaffman responded, suggesting that the flow should work, but xprmnts clarified the specific requirements and shared more details about their current setup and errors.
Ultimately, xprmnts reported that they were unable to achieve a passwordless setup using Cognito’s default means and had to set up a lightweight OAuth server using Flask and Python to handle the tokens.
However, I am attempting to find ways to enable the same authentication flow in discourse that we have for our mobile and web app. Which is a custom auth flow via passwordless login (users enter their email, receive a verification code).
The expectation is that the SSO would work via this passwordless auth flow, instead of email/password. Since users aren’t using passwords on the main apps.
Any pointers on how to enable this functionality? Or whether this is possible?
Unless I’m missing something, that should work. Just have them go wherever it is to get the link sent and you should be logged in to Discourse. Does that not work? Or do you want to make Discourse send them to the place to request the link?
What we want is the discourse sign in process to be the same. I attempted to use the same cognito app client configuration for discourse but get this error page
