Handling forced password reset in custom authentication is broken

Describe the bug In the console I have set my user to RESET_REQUIRED. Calling Auth.signIn throws an error “PasswordResetRequiredException”. The problem is that Auth.sendCustomChallengeAnswer requires the user object from signin. I don’t have access to the user object from the try catch.

To Reproduce

const login = async ({ username, password }) => {
    try {
      const user = await Auth.signIn(username, password);
      console.log('login -> user', user);
      setUser(user);
     ....
    } catch(err) {
      console.log('login -> err', err);
      if (err.code === 'PasswordResetRequiredException') {
        setNewPasswordRequired(true);
      } else if (err.code === 'UserNotConfirmedException') {
        props.navigation.navigate('VerifyEmail', { username });
      } else {
        setError(err.message);
      }
    }
  };

I then show an update password form, then call:

const updatePassword = async ({ password }) => {
    try {
      const result = await Auth.completeNewPassword(user, password);
      console.log('updatePassword -> user', result);
      setUser(result);
      setError(null);
      props.navigation.navigate('App');
    } catch(err) {
      console.log('updatePassword -> err', err);
      setError(err.message);
    }
  };

Expected behavior According to the docs:

Using promises has the same issue, no access to the user because it throws an error.

[haverchuck]

@appjitsu You say:

Calling Auth.signIn throws an error “PasswordResetRequiredException”. The problem is that Auth.sendCustomChallengeAnswer requires the user object from signin.

If you are receiving a ‘PasswordResetRequiredException’ error, can’t you transition to the reset password component from within the catch block, but if you don’t receive an error transition to a sendCustomChallengeResponse component (assuming you have one) when the signIn response doesn’t throw an error? Try looking at the React authenticator logic.

Apologies if I’ve misunderstood your issue. If this response doesn’t help please clarify the problem.

[github-actions[bot]]

This issue has been automatically locked since there hasn’t been any recent activity after it was closed. Please open a new issue for related bugs.

Looking for a help forum? We recommend joining the Amplify Community Discord server *-help channels or Discussions for those types of questions.