[Help Wanted] How to validate password in Javascript code before sending it to AWS Amplify

[vahdet]

I want my web front-end to validate the password before calling an Auth.signup(...) method, so that I can verify that the password that the user types is satisfying the AWS Cognito User Pool's policy.

Is there a way for generating a password-checker derived from AWS Cognito User Pool Policy (i.e. require number, require special chaarcter etc.) for Javascript?

[manueliglesias]

Hi @vahdet

Currently there is no way, that I know of, to do what you want. It is a very interesting use case that I'll make sure to share with the team!

This would require knowing in your front-end the current password policy, and verify according to it.

If this is a problem you would like to tackle yourself, you could start by looking at the Amazon Cognito API reference, specifically the DescribeUserPool operation. It gives you access to the Password policy for your user pool. maybe you could call this operation at build time, save the policy as a json that you can include in your front-end code and verify at runtime.

{
      // ...
      "Policies": { 
         "PasswordPolicy": { 
            "MinimumLength": number,
            "RequireLowercase": boolean,
            "RequireNumbers": boolean,
            "RequireSymbols": boolean,
            "RequireUppercase": boolean
         }
      },
      // ...
}

[github-actions]

This issue has been automatically locked since there hasn't been any recent activity after it was closed. Please open a new issue for related bugs.

Looking for a help forum? We recommend joining the Amplify Community Discord server *-help channels or Discussions for those types of questions.