Inquiry regarding the “Invalid user attributes: email” error when signing in with Google social login on a different device

[masashi972]

Hello,

I'm implementing a social login feature using Google accounts in Swift.
I'm using the showSignIn method to authenticate users via the Google provider, as shown below:

// Option to launch Google sign-in directly
let hostedUIOptions = HostedUIOptions(scopes: ["openid", "email"], identityProvider: "Google")

// Present the Hosted UI sign-in screen
AWSMobileClient.default().showSignIn(
    navigationController: self.navigationController!,
    hostedUIOptions: hostedUIOptions
) { (userState, error) in
    if let error = error as? AWSMobileClientError {
        print(error.localizedDescription)
    }
    if let userState = userState {
        print("Status: $$userState.rawValue)")
    }
}

The initial sign-in completes successfully.
However, when I attempt to sign in with the same Google account on a different device (as part of testing a device replacement scenario), the showSignIn method throws the following error:

Error Domain=com.amazon.cognito.AWSCognitoAuthErrorDomain
Code=-3000 "(null)" 
UserInfo={error=invalid_request: Invalid user attributes: email: Attribute cannot be updated.}

Could you please advise how I can resolve or work around this error?

• AWSMobileClient version: v2.13.6

Thank you very much in advance for your support.

[harsh62]

@masashi972 Are you able to use AWS Amplify Swift rather than using the this SDK?

You can follow this documentation to learn how to use the Amplify API.

[masashi972]

@harsh62 Thank you for your suggestion.

Unfortunately, I am unable to use Amplify Swift in our current project due to project requirements and existing constraints.
For this reason, I need to continue development using AWSMobileClient at this time.

If there are any possible workarounds or advice for resolving this issue with AWSMobileClient, I would greatly appreciate your guidance.

Thank you for your understanding.

[harsh62]

@masashi972 Are you facing the same issue when logging out and logging in again on the same device?

[masashi972]

@harsh62 I have confirmed that the same issue occurs even when performing a logout (global sign-out) and then signing in again on the same device.

[harsh62]

@masashi972 The error seems to be happening because Cognito is trying to modify an immutable attribute email. It seems something was done incorrectly during setup. Would you be able to share steps in detail that you followed to setup social login.

Documentation you can refer.

Your attribute mapping needs to be investigated a bit more. Look at this documentation.

[masashi972]

@harsh62 Here are the details of the current configuration:

Required attributes in the user pool:

• email
• locale

Attribute mapping:

• email is mapped to the email attribute provided by Google.
• locale is mapped to email as well, since Google does not provide a built-in locale attribute.

Please note that we are not able to recreate the user pool from scratch in this project.

Also, I would like to add that we encounter the same type of error for the locale attribute, similar to what occurs with the email attribute.

[harsh62]

This seems more of Cognito configuration issue. Please open a support ticket via the console.

To create a support case in the AWS Management Console, see Creating a support case.