MFA設定を管理する

$ amplify add auth

? Do you want to use the default authentication and security configuration?
  Manual configuration

# Answer as appropriate

? Multifactor authentication (MFA) user login options:
  ON (Required for all logins, can not be enabled later)
? For user login, select the MFA types:
  SMS Text Message
? Please specify an SMS authentication message:
  Your authentication code is {####}

# Answer as appropriate

Some next steps:
"amplify push" will build all your local backend resources and provision it in the cloud
"amplify publish" will build all your local backend and frontend resources (if you have hosting category added) and provision it in the cloud

$ amplify add auth

? Do you want to use the default authentication and security configuration?
  Manual configuration

# Answer as appropriate

? Multifactor authentication (MFA) user login options:
  ON (Required for all logins, can not be enabled later)
? For user login, select the MFA types:
  Time-Based One-Time Password (TOTP)

# Answer as appropriate

Some next steps:
"amplify push" will build all your local backend resources and provision it in the cloud
"amplify publish" will build all your local backend and frontend resources (if you have hosting category added) and provision it in the cloud

import { Auth } from 'aws-amplify';

async function signIn() {
  try {
    const user = await Auth.signUp({
      username,
      password,
      attributes: {
        phone_number: '+15558675309' // Replace with a valid phone number
      }
    });
  } catch (err) {
    console.log(error);
  }
}

import { Auth } from 'aws-amplify';

async function confirmSignUp() {
  try {
    await Auth.confirmSignUp(username, code);
  } catch (error) {
    console.log('error confirming sign up', error);
  }
}

import { Auth } from 'aws-amplify';

type ConfirmSignInWithMFAParameters = {
  username: string;
  password: string;
};

type MFAType = 'SMS_MFA';

async function signInWithMFA({
  username,
  password
}: ConfirmSignInWithMFAParameters) {
  try {
    const user = await Auth.signIn(username, password);
    if (
      user.challengeName === 'SMS_MFA' ||
      user.challengeName === 'SOFTWARE_TOKEN_MFA'
    ) {
      // You need to get the code from the UI inputs
      // and then trigger the following function with a button click.
      const code: string = await getCodeFromUserInput();
      const mfaType: MFAType = await getMFATypeFromUserInput();
      // If MFA is enabled, sign-in should be confirmed with the confirmation code:
      const loggedUser = await Auth.confirmSignIn(
        user, // Return object from Auth.signIn()
        code, // Confirmation code
        mfaType // MFA Type e.g. SMS_MFA, SOFTWARE_TOKEN_MFA
      );
      console.log(loggedUser);
    } else {
      // The user directly signs in:
      console.log(user);
    }
  } catch (error) {
    console.log(`error signing in`, error);
  }
}

async function getCodeFromUserInput(): Promise<string> {
  // fetch code using a user form input
}
async function getMFATypeFromUserInput(): Promise<MFAType> {
  // fetch MFA type from user form input
}

import { CognitoUserSession } from 'amazon-cognito-identity-js';
import { Auth } from 'aws-amplify';

type SetupTOTPAuthParameters = {
  user: string;
  challengeAnswer: string;
  mfaType?: 'SMS_MFA' | 'SOFTWARE_TOKEN_MFA';
};

async function setupTOTPAuth({
  user,
  challengeAnswer,
  mfaType
}: SetupTOTPAuthParameters) {
  // To set up TOTP, first you need to get a `authorization code` from Amazon Cognito.
  // `user` is the current Authenticated user:
  const secretCode = await Auth.setupTOTP(user);

  // You can directly display the `code` to the user or convert it to a QR code to be scanned.
  // For example, use following code sample to render a QR code with `qrcode.react` component:
  //      import QRCodeCanvas from 'qrcode.react';
  //      const str = "otpauth://totp/AWSCognito:"+ username + "?secret=" + secretCode + "&issuer=" + issuer;
  //      <QRCodeCanvas value={str}/>

  // ...

  // Then you will have your TOTP account in your TOTP-generating app (like Google Authenticator)
  // use the generated one-time password to verify the setup.
  try {
    const cognitoUserSession: CognitoUserSession = await Auth.verifyTotpToken(
      user,
      challengeAnswer
    );
    // Don't forget to set TOTP as the preferred MFA method.
    await Auth.setPreferredMFA(user, 'TOTP');
  } catch (error) {
    // Token is not verified
  }

  // ...

  // Finally, when sign-in with MFA is enabled, use the `confirmSignIn` API
  // to pass the TOTP code and MFA type.
  const OTPCode = '123456'; // Code retrieved from authenticator app.
  await Auth.confirmSignIn(user, OTPCode, mfaType); // Optional, MFA Type e.g. SMS_MFA || SOFTWARE_TOKEN_MFA
}

import { Auth } from 'aws-amplify';

type PreferredMFAType = 'TOTP' | 'SMS' | 'NOMFA';

async function setupMFAType(preferredMFA: PreferredMFAType) {
  try {
    const user = await Auth.currentAuthenticatedUser();
    const data = await Auth.setPreferredMFA(user, preferredMFA);
    console.log(data);
  } catch (error) {
    console.log('error setting up MFA type', error);
  }
}

// Select TOTP as preferred.
setupMFAType('TOTP');

// Select SMS as preferred.
setupMFAType('SMS');

// Select no MFA.
setupMFAType('NOMFA');

import { Auth } from 'aws-amplify';

async function getPreferredMFAType() {
  try {
    // Will retrieve the current MFA type from cache
    // `bypassCache` is optional and by default is false.
    // If set to true, it will get the MFA type from server-side
    // instead of from local cache.
    const user = await Auth.currentAuthenticatedUser();
    const data = await Auth.getPreferredMFA(user, { bypassCache: false });
    console.log('Current preferred MFA type is: ' + data);
  } catch (err) {
    console.log(err);
  }
}

import { Auth } from 'aws-amplify';

async function rememberDevice() {
  try {
    const result = await Auth.rememberDevice();
    console.log(result);
  } catch (error) {
    console.log('Error remembering device', error);
  }
}

import { Auth } from 'aws-amplify';

async function forgetDevice() {
  try {
    await Auth.forgetDevice();
  } catch (error) {
    console.log('Error forgetting device', error);
  }
}

import { Auth } from 'aws-amplify';

async function fetchDevices() {
  try {
    const result = await Auth.fetchDevices();
    console.log(result);
  } catch (err) {
    console.log('Error fetching devices', err);
  }
}