Private session option on AWS Amplify Social Login

[deveshmittalncs]

Hi

We are logging using the social sign in options on AWS Amplify on Android.

 Amplify.Auth.signInWithSocialWebUI(
                    AuthProvider.facebook(),
                    activity as LoginActivity,
                    { result ->
                        Log.i("AuthQuickstart", "Facebook login: " + result.toString())
                        if(result.isSignInComplete){
                            (activity as LoginActivity).launchDashboardActivity()
                        }
                    },
                    { error ->
                        Log.e("AuthQuickstart", error.toString())
                    }
                )

On iOS, an option is provided with which when the user logs out from the device, the default Social account isn't picked up again.

Amplify.Auth.signInWithWebUI(for: .apple, presentationAnchor: presentAnchor,options: .preferPrivateSession()) {​​​​​​​​ result in}​​​​​​​

We require the user to login to our app using a different social login from the same provider.

Is it possible to achieve this on Android?

[changxu0306]

I don't think this is supported by Android right now.

[deveshmittalncs]

Hi @changxu0306 Any idea when this will be available? Is there a workaround that I can still use on AWS Amplify?

[richardmcclellan]

Hi @deveshmittalncs, this sounds like a bug in the library. When you sign out, it should clear cookies so that you aren't automatically signed in to the same account on the next sign in. Re-opening for further investigation.

[deveshmittalncs]

Thanks, @richardmcclellan for letting me know.

Is there a workaround that we can use to sign out on Android, so that the app doesn't sign the user automatically.

cc @VishnuNCS

[raphkim]

There was an issue with signout where it won't clear the user session upon signing out. This issue is now resolved with v1.17.8. Please follow the updated documentation to apply this fix :)

[Lavanya2204-developer]

@raphkim ,

I still seem to be facing this issue for Social Web login (Google & Facebook) after upgrading to the latest SDK v1.17.8. We are automatically signed in again.

However, when there are 2 accounts available for Gmail login it shows a screen where we are able to choose one of the accounts. But if there is only 1 account it seems to auto login

Below are the changes that I've done as per the updated documents:

1. Updated AndroidManifest.xml
2. Removed Response handler as it is not required for v1.17.8

Dependencies Used:

    // Amplify
    implementation 'com.amplifyframework:core:1.17.8'
    implementation 'com.amplifyframework:aws-auth-cognito:1.17.8'

cc @VishnuNCS

[richardmcclellan]

@raphkim's change fixed the sign out flow so that the Cognito session cookies are cleared on sign out.

However, it appears that cookies from federated providers (Google, Facebook, etc) are not cleared. This appears to be a limitation of Cognito.

We will follow up with the Cognito service team for next steps.