Francisco Rodriguez

Amplify is an open source library that allows customers to interact with Cloud Services such as Amazon Cognito. Amazon Cognito provides a mechanism to get different scopes on the access...

@motzko @AlphaJuliettOmega @icapurro @zilahir @martinmicunda @sonphnt What is the use case you are trying to solve by only checking if the token is expired without having the library to renew...

@martinmicunda, interesting so you would like to track when the user is back to the App but without doing any operations on it? What is the flow when the user...

Sorry for the late reply, the workaround is the following When prompting for `username` `password` and `code` you would have to keep on App state the `username` and `password` then...

@jerocosio I think the safest way to do this would be on the Cognito API to have `globalSignout` flag to invalidate all the sessions for that user. Does the workaround...

@aoloo doing `Auth.signIn(..)` will resend the code, in that case you will need to store in memory the username and password for that purpose.

@sacrampton For helping us triage this issue, can you provide more details about: - Are you experience this problem on Web or Native Apps or both? - On which Device...

Thanks @hkjpotato I would do it a little different. I would prevent calling [`this._handleAuthResponse(url);`](https://github.com/aws-amplify/amplify-js/blob/da8cd4c691c92f43ee920505230c8f4a54fdb5e4/packages/auth/src/Auth.ts#L250 ) if the `url` is not on OAuth configuration. What do you think?

@TheVaporTrail currently that is not possible to do. We have an open RFC with admin auth task [here](https://github.com/aws-amplify/amplify-cli/issues/766).

@pechisworks why you cannot use `Auth.signIn(...)` instead of `Auth.federatedSign(..)`, what is your use case?