Configuration

The application now authenticates users through Amazon Cognito via NextAuth.

The provider configuration lives in packages/shared/src/auth/nextauth.ts. By default we expose a single Cognito provider and rely on environment variables to configure the user pool:

providers.push(
  Cognito({
    clientId: process.env.COGNITO_CLIENT_ID,
    clientSecret: process.env.COGNITO_CLIENT_SECRET,
    issuer: process.env.COGNITO_ISSUER,
  }),
);

To enable the provider, make sure the following variables are set for the frontend:

COGNITO_CLIENT_ID=<app client id>
COGNITO_CLIENT_SECRET=<app client secret>
COGNITO_ISSUER=https://cognito-idp.<region>.amazonaws.com/<user-pool-id>
NEXTAUTH_SECRET=<random-string>
NEXTAUTH_URL=https://app.yourdomain.com

Email verification, MFA, and password policies are controlled directly in Cognito. Because Cognito performs the verification flow, there is no additional configuration required inside the application.

If you need to add additional OAuth providers, you can extend the NextAuth configuration by appending providers in nextauth.ts.