Package software.amazon.awscdk.services.cognito

Interface AllowedFirstAuthFactors

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

AllowedFirstAuthFactors.Jsii$Proxy

@Generated(value="jsii-pacmak/1.120.0 (build 192dc88)",
           date="2025-12-05T22:26:33.202Z")
@Stability(Stable)
public interface AllowedFirstAuthFactors
extends software.amazon.jsii.JsiiSerializable

The types of authentication that you want to allow for users' first authentication prompt.

Example:

 UserPool.Builder.create(this, "myuserpool")
         .signInPolicy(SignInPolicy.builder()
                 .allowedFirstAuthFactors(AllowedFirstAuthFactors.builder().password(true).passkey(true).build())
                 .build())
         .passkeyRelyingPartyId("auth.example.com")
         .passkeyUserVerification(PasskeyUserVerification.REQUIRED)
         .build();
 

See Also:

• https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flows-selection-sdk.html#authentication-flows-selection-choice

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	AllowedFirstAuthFactors.Builder	A builder for AllowedFirstAuthFactors
static final class	AllowedFirstAuthFactors.Jsii$Proxy	An implementation for AllowedFirstAuthFactors

Method Summary

Modifier and Type	Method	Description
static AllowedFirstAuthFactors.Builder	builder()
default Boolean	getEmailOtp()	Whether the email message one-time password is allowed.
default Boolean	getPasskey()	Whether the Passkey (WebAuthn) is allowed.
Boolean	getPassword()	Whether the password authentication is allowed.
default Boolean	getSmsOtp()	Whether the SMS message one-time password is allowed.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getPassword

@Stability(Stable)
@NotNull
Boolean getPassword()

Whether the password authentication is allowed.

This must be true.

getEmailOtp

@Stability(Stable)
@Nullable
default Boolean getEmailOtp()

Whether the email message one-time password is allowed.

Default: false

getPasskey

@Stability(Stable)
@Nullable
default Boolean getPasskey()

Whether the Passkey (WebAuthn) is allowed.

Default: false

getSmsOtp

@Stability(Stable)
@Nullable
default Boolean getSmsOtp()

Whether the SMS message one-time password is allowed.

Default: false

builder

@Stability(Stable)
static AllowedFirstAuthFactors.Builder builder()

Returns:

a AllowedFirstAuthFactors.Builder of AllowedFirstAuthFactors