amplify_auth_cognito

Features

• Completing initial wasm support for web packages
  • analytics: #7162
  • authenticator: #7195
  • db_common: #7186
  • firehose: #7168
  • kinesis: #7172
  • sigv4: #7187
  • smithy: #7188
  • storage: #7148
• feat(notifications): Fail fast when push is used on an unsupported platform (#7185)
• feat(connect): Introduce Amplify Connect client for Customer Profiles (#7109)

Features

• feat(api): Add wasm support (#7145)

Fixes

• fix(push_notifications): Migrate from deprecated JobIntentService to WorkManager (#7000)

Features

• feat(auth): Add wasm support (#7094)

Fixes

• fix: Drop dart:io for better wasm support (#7099)

Features

• feat(auth): Add Swift Package Manager support to amplify_auth_cognito (#6847)

• Minor bug fixes and improvements

Features

• feat(auth): Passwordless login (#6538)

Features

• Add support for custom Cognito endpoints (#6477)

Fixes

• fix(auth): added Cognito OIDC options to sign in uri (#6481)

Features

• feat(auth): add support for cognito oidc parameters in managed login (#6442)

Features

• feat(auth): Added support for Android private browsing (#6336)

Chores

• chore(all): Bumped Flutter SDK to ^3.35.0 (#6306)
• chore(all): Bumped Dart SDK to ^3.9.0 (#6306)
• chore(all): Bumped com.android.tools.build:gradle to 8.12.1 (#6306)
• chore(auth): Bumped androidx.browser:browser to 1.9.0 (#6306)

Chores

• chore(auth): Bumped kotlin_version to 2.2.0 (#6224)
• chore(auth): Bumped com.android.tools.build:gradle to 8.11.0 (#6203)
• chore(auth): Bumped org.jetbrains.kotlinx:kotlinx-coroutines-android to 1.10.2 (#6187)

Chores

• chore(all): Bump Dart SDK to 3.8.0 (#6165)

• Minor bug fixes and improvements

Chores

• chore(all): Bump Dart SDK to 3.7.0 (#6026)

• Minor bug fixes and improvements

• Minor bug fixes and improvements

Features

• feat(auth, authenticator): Add support for Email OTP MFA (#5449) (#5472)

• Minor bug fixes and improvements

• Minor bug fixes and improvements

Features

• feat(Auth): Add fetchCurrentDevice API (#5251)

• Minor bug fixes and improvements

Features

• feat: Support Amplify Gen 2 outputs (#5073)

• Minor bug fixes and improvements

We are thrilled to release version 2.0 of the Amplify Flutter libraries to add support for Amplify Gen 2. Learn more about Amplify Gen 2 at https://docs.amplify.aws.

If you are upgrading an existing project using Amplify Flutter v1 (created with Amplify Gen 1 CLI or a custom pipeline) please see the upgrade guide.

As always, you can find us on GitHub and Discord to answer any questions.

Breaking Changes

• chore!: remove deprecated auth types (#4764)
• fix!: regenerate cognito sdks to update signup operation for adding limit exceeded exception (#4781)

Fixes

• fix: Android Intent URI Query Parameter Parsing (#4546)
• fix: map Lambda exceptions correctly (#4804)

Features

• feat: update plus plugins version (#4619)

Fixes

• fix(auth): Allow retries with verifyTotpSetup() (#4532)
• fix(auth): device metadata migration (#4503)
• fix(auth): verifyTotp throw EnableSoftwareTokenMfaException (#4558)

• This version was retracted to avoid a breaking change introduced in (#4532)

• Minor bug fixes and improvements

Fixes

• fix: Bumped path to ">=1.8.0 <2.0.0"

• Minor bug fixes and improvements

Features

• feat: rename sendUserAttributeVerificationCode (#3759)

• Minor bug fixes and improvements

Fixes

• fix(aft): Constraints edge cases (#3732)

Fixes

• fix(auth): Crash with EXC_BAD_ACCESS (#3657)
• fix(auth): Custom auth with device tracking, no SRP (#3652)
• fix(auth): Uncaught Hosted UI cancellation (#3686)

Features

• feat(auth): TOTP MFA
• feat(authenticator): TOTP MFA (#3609)

Fixes

• fix(auth): Pass deviceKey in custom auth challenge

• Minor bug fixes and improvements

Fixes

• fix(auth): Android Hosted UI flakiness

Features

• feat(auth): Enable ASF

• Minor bug fixes and improvements

Fixes

• fix(auth): Attribute key equality (#3136)
• fix(auth): signOut after user deletion (#3162)

Fixes

• fix(auth): remove duplicate continuation call for hosted UI (#3112)
• fix: suppress browser on sign out when preferPrivateSession is true (#3099)
• fix(auth): User attribute serialization

Features

• Dart 3 support (must update Dart SDK constraint to ^3.0.0)

Fixes

• fix(repo): Flutter 3.3 support

We are thrilled to release version 1.0 of the Amplify Flutter libraries!

This release introduces a full rewrite of the Amplify libraries in Dart, allowing you to build AWS cloud-connected applications on every platform Flutter supports (iOS, Android, Web, macOS, Windows, and Linux).

If you've been using v0 in production, you can now safely migrate to v1. Check out our migration guide for more information.

As always, you can find us on GitHub and Discord to answer any questions.

New Features in the Auth category

• fetchAuthSession now supports a forceRefresh parameter which, when passed, will refresh User Pool tokens and AWS credentials regardless if they’ve expired.
• The result of Amplify.Auth.signUp now provides the user ID of the created user. Previously this was only available after signing in.
• Custom OAuth providers are now configurable when signing in via Hosted UI.
• A new federateToIdentityPool API has been added to the Cognito plugin which allows federating directly into an Identity Pool to receive AWS credentials using a third-party identity provider (IdP) token.
  • Note: Since this method is only available on the Cognito plugin, it must be called directly on the plugin. The Cognito plugin can be retrieved by calling Amplify.Auth.getPlugin(AmplifyAuthCognito.pluginKey) anytime after configuration.
  • This method prevents usage of any User Pool-related methods. It should only be used in scenarios where you need AWS credentials and already have a mechanism for retrieving OIDC tokens from a third-party IdP.

Bug Fixes

The following issues have been fixed in this release:

• Users getting session expired right after sign in (#1271)
• Inconsistent/Incorrect behavior when fetching auth session without internet access (#760)
• Amplify.Auth.updateUserAttribute crashes app (#2361)
• Support user migration lambda function trigger & USER_PASSWORD authentication type (#442)
• Custom Auth Flow with passwordless login (#2393)
• Error while getting the getCurrentUser if mobile is connected to network without internet (#2292)
• NotAuthorizedException exception message are different on android and iOS (#2231)
• AuthException/CustomTabsNotSupportedException when default browser does not support custom tabs (#1830)
• Auth Fetch Auth Session fail after relogin (#1438)
• Not getting lamda exceptions for social login (#1279)
• Username from Auth.getCurrentUser has inconsistent casing on iOS and Android (#723)
• UpdateUserAttributeResult.isUpdated is true on Android but false on iOS if the attribute requires confirmation (#609)
• Generic AuthException is thrown when the device does not have chrome installed (#587)
• isSignUpComplete returns True in android even if the user has not been confirmed. In iOS it doesn't. (#581)
• Username is cached for use in confirmPassword on Android (#464)
• Remove browser redirection after signOut() in app using social sign in (#401)
• Force token refresh (#299)
• Amplify.Auth.getCurrentUser() return different platform results when using email based auth (#201)

Breaking Changes

• chore(auth)!: send Pinpoint Endpoint id to Cognito
• refactor(auth)!: Remove generic types (#2804)

Fixes

• fix(auth): Always allow repeated confirmSignIn attempts
• fix(auth): Process sign-in events once

• Minor bug fixes and improvements

Breaking Changes

• refactor(auth)!: Plugin options (#2691)

Fixes

• fix(auth): Await signInUri in Hosted UI platform (#2706)

Breaking Changes

• refactor(auth)!: Make attribute update step an enum
• refactor(auth)!: Make reset password step an enum
• refactor(auth)!: Make sign-in step an enum
• refactor(auth)!: Make sign-up step an enum
• refactor(auth)!: Remove category->plugin indirection for getPlugin
• refactor(auth)!: State machine facade (#2482)

• Minor bug fixes and improvements

Breaking Changes

• fix(auth)!: Fetch Auth Session offline behavior (#2585)

Fixes

• fix(auth): SessionExpired Auth Hub event (#2609)

Breaking Changes

• chore(auth)!: Remove isPreferPrivateSession from CognitoSignOutWithWebUIOptions (#2538)
• refactor(auth)!: Align exception types
• refactor(auth)!: Remove intermediate request types (#2475)
• refactor(core)!: Migrate exception types

Fixes

• fix(auth): Can't resubmit verification code (#2468)

Breaking Changes

• chore(auth)!: Make sign in result's nextStep non-null (#2462)

Features

• feat(auth): Add user ID to CognitoSignUpResult (#2437)

Fixes

• fix(auth): Add no-store cache control header

• Minor bug fixes and improvements

• Minor bug fixes and improvements

Initial developer preview release for all platforms.

Developer Preview

The Amplify Flutter libraries are being rewritten in Dart. This version is part of our developer preview for all platforms and is not intended for production usage. Please follow our Web and Desktop support tickets to monitor the status of supported categories. We will be releasing Web and Desktop support for all Amplify categories incrementally.

For production use cases please use the latest, non-tagged versions of amplify-flutter packages from pub.dev. They offer a stable, production-ready experience for Android and iOS.