Refresh token integration with React native repack super app

[akshay-capgemini]

Is this related to a new or existing framework?

No response

Is this related to a new or existing API?

No response

Is this related to another service?

No response

Describe the feature you'd like to request

I am integrating the refresh token in our current React Native application, which is built using Callstack's Re.Pack. In my application, I can generate a new access token and get sessions in one flow. I need to get the session and generate a new access token even if the app is closed and reopened, and also after the app is killed and reopened.

Are there any methods or ways to get the session when the app is closed and reopened? (I don't want to use local storage or AsyncStorage to store the data from Cognito.)

Describe the solution you'd like

I need to get session details from aws even if I close the app and reopens.

Describe alternatives you've considered

Im trying to reduce the use of async storage and do all the features with the support of amazon-cognito-identity-js. Currently I don't have any solution to achieve my needs.

Additional context

No response

Is this something that you'd be interested in working on?

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

[cwomack]

Hey, @akshay-capgemini 👋. Want to ask a couple clarifying questions to better understand the feature request here. Are you trying to have the session destroyed/created again every time the app is opened/closed? And have you tried using the forceRefresh flag in this situation to see if this provides the behavior that you're looking for (see here)?

Also, are you on v5 or v6 of Amplify? I know you're trying to use the amplify-cognito-identity-js package, but just to be clear that is no longer used in v6. We recommend using Amplify JavaScript library's Auth features in place of the Amazon Cognito Identity SDK.

[cwomack]

@akshay-capgemini, just wanted to ping you again to see if you had a chance to review the above comment and provide some additional insight. Thanks!

[akshay-capgemini]

@cwomack My aim is to avoid to store the tokens and data to the local storage to improve the app security. My app works fine when it is live and Im able to get the session, but when I quit or kill the app and try to reopen the app Im not able to get the session from cognito. So I need to know is there any way to get the session even after I quit the app and reopen. Currently all the items is handled by using amplify-cognito-identity-js package.

[HuiSF]

Sorry about the delayed response.

My aim is to avoid to store the tokens and data to the local storage to improve the app security.

but when I quit or kill the app and try to reopen the app Im not able to get the session from cognito.

A signed-in session can resumed after killing and reopening the app is done by reading persisted refresh token so it can refresh corresponding access token and ID token for the previously signed in user. If you don't want to persist any data after signing in, I can't think of any way to resume the session except asking the end user to resign in after reopening the app after the in memory data got eliminated by killing the app.

In a React Native app, Amplify uses AsyncStorage as the default token persisting storage. If you are using Amplify JS v6, you may customize the underlying storage. You can do this by customizing the tokenProvider when calling Amplify.configure(), for exmaple:

import { TokenProvider } from 'aws-amplify/auth';
import config from 'amplify_outputs.json';

const myTokenProvider: TokenProvider = <your implementation>;

Amplify.configure(
  config,
  {
    Auth: {
      tokenProvider: myTokenProvider // provide your token provider here
    }
  }
)

<you implementation> presents the implementation you created using other types of storage that can persist the tokens, for example, iOS Key Chain, and Android KeyStore.

Note: Amplify JS v5 is not capable to customize the token store.

Please let us know if anything else that we can assist with on this topic.