Resend Code on SignIn doesn't resend the code

[guy-ecton]

Before creating a new issue, please confirm:

• I have searched for duplicate or closed issues and discussions.
• I have tried disabling all browser extensions or using a different browser
• I have tried deleting the node_modules folder and reinstalling my dependencies
• I have read the guide for submitting bug reports.

On which framework/platform are you having an issue?

React

Which UI component?

Authenticator

How is your app built?

Vite

What browsers are you seeing the problem on?

No response

Which region are you seeing the problem in?

No response

Please describe your bug.

When a user has their MFA enabled (lets say SMS), and they perform a sign-in, they get the view of entering the OTP, and there is a "Resend Code" button being rendered (All by the Authenticator component).

However, as I understand from AWS Support, resending the code during sign-in is not actually supported, and user is expected to go via initAuth again. (When I click the Resend Code I get an error password is required to signIn).

Am I missing anything?
I mean, Amplify UI renders this button for a reason, right?
What is the quickest workaround to have this button re-init the auth flow, either programmatically, or by redirecting the user back to entering email+password?

Also, is there an ETA for implementing this ability?
Thanks

What's the expected behaviour?

Resend Code during sign-in should, in face, resend the OTP code

Help us reproduce the bug!

1. Have a user with MFA set (like SMS)
2. Sign in
3. Click Resend Code button
4. password is required to signIn is shown, and no new code is sent

Code Snippet

// Put your code below this line.

Console log output

No response

Additional information and screenshots

"@aws-amplify/ui-react": "^6.15.3"
"aws-amplify": "^6.16.3"

[osama-rizk]

Hey @guy-ecton ,
Thank you for reporting this issue we will investigate and get back to you.

[osama-rizk]

Hi @guy-ecton, you're correct — resending an MFA code during the sign-in flow is not currently supported by the
underlying Amplify JS SDK. This is a known gap and is tracked as a feature request in
aws-amplify/amplify-js#6676.

The expected workaround today is to re-initiate the sign-in flow, as AWS Support mentioned.

That said, the "Resend Code" button should not be displayed if the action it triggers isn't supported. We'll investigate why it's being rendered in this context and address that on our end.

[guy-ecton]

Thanks for replying. And thanks for linking the other issue.
We are going to use some CSS to hide the button. BTW- it would be great if some identifiers (like data attributes) could be added by Amplify on such components (like Resend Code, Back to Sign-In, etc) for easier CSS selectors, and it would be great to even control/modify them from the React part.

[osama-rizk]

Hi @guy-ecton, we've confirmed this is a bug introduced in v6.14.0. The "Resend
Code" button is rendered during the sign-in MFA challenge, but the underlying logic fails because it attempts
to re-initiate sign-in without the password that was already cleared from the state machine context.

In the meantime, here are two workarounds:

1. Hide the button via CSS (as you've already done) — this is the quickest path.
2. Downgrade to @aws-amplify/ui-react@6.13.2 — this is the latest version before the regression. Note that
   this version does not include passwordless authentication support, so only use this option if your app doesn't
   rely on that feature.

We're actively working on a fix for this issue and will update here the fix progress.