I have created a userpool in Cognito
.
What I would like to do is when a new user tries to sign-up using the UI, he gets a verification code. Once the user enters the code, a Post confirmation
lambda must be triggered and it must add this newly created user directly to a group named users
.
I found admin_add_user_to_group client and wrote the following code and deployed it as a lambda:
import boto3
import hmac
import hashlib
import base64
USER_POOL_ID = ''
CLIENT_ID = ''
CLIENT_SECRET = ''
def lambda_handler(event, context):
client = boto3.client('cognito-idp')
try:
username = event['username']
response = client.admin_add_user_to_group(
UserPoolId=USER_POOL_ID,
Username=username,
GroupName='users'
)
except client.exceptions.InvalidParameterException:
return {"error": True, "success": False, "message": "Username doesnt exists"}
except client.exceptions.ResourceNotFoundException:
return {"error": True, "success": False, "message": "Invalid Verification code"}
except client.exceptions.NotAuthorizedException:
return {"error": True, "success": False, "message": "User is already confirmed"}
except Exception as e:
return {"error": True, "success": False, "message": f"Unknown error {e.__str__()} "}
return event
After deploying the code, I connected it to the Post confirmation
trigger. Now, when the user tries to sign-up, a code is sent. But, when I paste the code to confirm the user two things happen:
users
group.It shows the following error:
What is the mistake that I am committing?
The post-confirmation has to return the event
, always.
In your code, you are catching errors and then not returning the event
.
So, what happened is that your code caught one of those errors and did not return the event.