Allowed OAuth Scopes

[marcschroeter]

The values Cognito and profile are not working for OAuth Scopes

[juan-dambra]

Hi @marcschroeter!

I came across this as well. In fact I have just submitted a Pull Request to @rosberglinhares. Check it out!

AWS docs are wrong. If your are looking at:

https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolClient.html#CognitoUserPools-UpdateUserPoolClient-request-AllowedOAuthScopes

There it mentions the current supported values:

"phone", "email", "openid", and "Cognito"

But in reality, the current supported values are:

"phone", "email", "openid", "aws.cognito.signin.user.admin", "profile"

Your problem is using "Cognito" instead of "aws.cognito.signin.user.admin". Let me know if this helps you!