(QUESTION) How to support both email-password and phone-otp authentication with GEN 2 ?

[stMerlHin]

I would like to allow my users to choose between login with email and password or with their phone number but doing this:

import { defineAuth } from "@aws-amplify/backend"

/**
 * Define and configure your auth resource
 * @see https://docs.amplify.aws/gen2/build-a-backend/auth
 */
export const auth = defineAuth({
  loginWith: {
    email: true,
    phone: true,
  },
})

require users to provider both email and phone number.
Please how can I achieve this (Allow user to choose between email-password and phone number for authentication) ?

[ekjotmultani]

Hi @stMerlHin, is your question about allowing the user to use a passwordless flow using phone/email, or is it to allow the user to chose which type of login they would like to use for their account?

[stMerlHin]

Hi @ekjotmultani, my use case is to allow user to choose between theses types, email-password and phone-otp for the account. Only phone-otp is passwordless flow.

[ekjotmultani]

Hi @stMerlHin, have you implemented the phone-otp yourself?

[stMerlHin]

Hey, @ekjotmultani, no, I have not implemented the phone-otp myself. I would like to use amplify one powered by cognito.

[stMerlHin]

Actually user have the choice between using google account or phone number to sign in. Because device tracking cannot be done when external providers are used, we will drop google authentication and replace it by email-password so that user will have to choose between email-password and phone-otp for authentication and we would like to achieve this with amplify and cognito.

[tyllark]

Hello @stMerlHin, sorry for the delay. Please let me know if the following answers your questions:

1. We currently do not support a passwordless signup flow, but you can create a passwordless sign in flow via Custom Auth Flows.
2. you can enable SMS and Email MFA by following this guide.
   a. The amplify/auth/resource.ts sample will enable SMS MFA
   b. The amplify/backend.ts sample will enable Email MFA since defineAuth does not support this currently
3. You can handle the SMS and Email flow in your code via Amplify.Auth or you can use our Authenticator package to generate the below screens.