ID token does not include attributes such as given_name, family_name, or preferred_username #360
Description
The ID Token does not include attributes such as given_name, family_name, or preferred_username even though they exist on the user.
Decoded ID token:
{
"alg": "RS256",
"typ": "JWT",
"kid": "CognitoLocal"
}
{
"cognito:username": "[email protected]",
"auth_time": 1672277860,
"email": "[email protected]",
"email_verified": false,
"event_id": "171100f3-aaac-4144-ba08-34d546336515",
"iat": 1672277860,
"jti": "8dfcc238-6382-4ba7-af41-8d1e79e97135",
"sub": "f36cbdd1-253e-4d47-b7e3-04e2d92ea6c6",
"token_use": "id",
"exp": 1672364260,
"aud": "djvkg1i4saxvezvy9fsjbrcci",
"iss": "http://localhost:9229/local_1k918F3w"
}
Example user in local_ db file
{
"Users": {
"[email protected]": {
"Username": "[email protected]",
"Password": "123456789",
"Attributes": [
{
"Name": "sub",
"Value": "f36cbdd1-253e-4d47-b7e3-04e2d92ea6c6"
},
{
"Name": "preferred_username",
"Value": "[email protected]"
},
{
"Name": "email",
"Value": "[email protected]"
},
{
"Name": "given_name",
"Value": "First"
},
{
"Name": "family_name",
"Value": "Last"
}
...
Commands for setup and generating token:
aws --endpoint http://localhost:9229 cognito-idp list-user-pools --max-results 1
aws --endpoint http://localhost:9229 cognito-idp create-user-pool --pool-name userpool-name --username-attributes email
aws --endpoint http://localhost:9229 cognito-idp create-user-pool-client --user-pool-id $user_pool_id --client-name client-name --allowed-o-auth-scopes "email openid profile" --read-attributes "email" "given_name" "family_name" "preferred_username"
aws --endpoint http://localhost:9229 cognito-idp admin-create-user --user-pool-id $user_pool_id --desired-delivery-mediums EMAIL --username [email protected] --user-attributes Name=preferred_username,[email protected] Name=email,[email protected] Name=given_name,Value=First Name=family_name,Value=Last
aws --endpoint http://localhost:9229 cognito-idp admin-initiate-auth --user-pool-id $user_pool_id --client-id $client_id --auth-flow ADMIN_USER_PASSWORD_AUTH --auth-parameters [email protected],PASSWORD=123456789