autoSignIn() only works in a happy path

[KamilSucharski]

Before opening, please confirm:

• I have searched for duplicate or closed issues and discussions.

Language and Async Model

RxJava

Amplify Categories

Authentication

Gradle script dependencies

Details

// Put output below this line
    implementation 'com.amplifyframework:core:2.30.1'
    implementation 'com.amplifyframework:aws-auth-cognito:2.30.1'
    implementation 'com.amplifyframework:rxbindings:2.30.1'
    coreLibraryDesugaring 'com.android.tools:desugar_jdk_libs:2.1.5'

Environment information

Details

# Put output below this line
------------------------------------------------------------
Gradle 9.0.0
------------------------------------------------------------

Build time:    2025-07-31 16:35:12 UTC
Revision:      328772c6bae126949610a8beb59cb227ee580241

Kotlin:        2.2.0
Groovy:        4.0.27
Ant:           Apache Ant(TM) version 1.10.15 compiled on August 25 2024
Launcher JVM:  21.0.6 (JetBrains s.r.o. 21.0.6+-13391695-b895.109)
Daemon JVM:    D:\Programs\Android\Android Studio\jbr (no JDK specified, using current Java home)
OS:            Windows 11 10.0 amd64

Please include any relevant guides or documentation you're referencing

No response

Describe the bug

The autoSignIn() only works in a happy path, that is:

1. signUp
2. confirmSignUp
3. autoSignIn

But it gets stuck (no result returned from the autoSignIn() method) if I do this:

1. signUp
2. confirmSignUp with wrong code
3. confirmSignUp with correct code
4. autoSignIn <-- stuck

or this:

1. signUp
2. clear app data, signIn, still need to activate this account
3. confirmSignUp
4. autoSignIn <-- stuck

Previously this wasn't an issue for me, since I just performed the login for the user, and that always worked, but once we started using 2FA, the user was asked to enter the confirm account code, and then immediately after to enter the 2FA code.

I am told this works on iOS.

Reproduction steps (if applicable)

No response

Code Snippet

// Put your code below this line.

Log output

Details

// Put your logs below this line

Configuration File

No response

GraphQL Schema

Details

// Put your schema below this line

Additional information and screenshots

No response

[mattcreaser]

Thanks for opening this issue @KamilSucharski. We'll need to investigate and get back to you.

[mattcreaser]

Just to confirm, you are using USER_AUTH auth flow type. Are you confirming the signup with email OTP or SMS OTP?

[KamilSucharski]

@mattcreaser I am using USER_SRP_AUTH and the OTP goes through email.

[harsh62]

@KamilSucharski Would you be able to provide code snippets of your login workflow and the configuration file redacted all the sensitive information. Also, please provide verbose logs when the issue is happening.

Once you provide this information, our team will start investigating.

[KamilSucharski]

Code snippets, I included only the amplify-related ones, as the flow is explained in my first post

override fun confirmAccount(
	username: String,
	code: String,
	isRegister: Boolean
): Observable<Unit> = RxAmplify
	.Auth
	.confirmSignUp(
		username,
		code
	)
	.map {}
	.toObservable()
	.flatMap {
		when (isRegister) {
			true -> RxAmplify
				.Auth
				.autoSignIn()
				.map {
					val i = 0 // Just for testing, the breakpoint will only trigger in a happy path
				}
				.toObservable()

			false -> Observable.just(Unit)
		}
	}
	
override fun login(
	username: String,
	password: String
): Observable<LoginResult> = RxAmplify
	.Auth
	.signIn(
		username,
		password
	)
	.map(::parseAuthSignInResult)
	.onErrorReturn {
		if (it is UserNotConfirmedException) {
			LoginResult.AccountNotActivated
		} else {
			LoginResult.Failure(it)
		}
	}
	.toObservable()

override fun register(
	username: String,
	password: String
): Observable<Unit> = RxAmplify
	.Auth
	.signUp(
		username,
		password,
		AuthSignUpOptions.builder().build()
	)
	.map {}
	.toObservable()

private fun parseAuthSignInResult(result: AuthSignInResult): LoginResult {
	return when {
		result.isSignedIn -> LoginResult.Success
		result.nextStep.signInStep == AuthSignInStep.CONFIRM_SIGN_UP -> LoginResult.AccountNotActivated
		result.nextStep.signInStep == AuthSignInStep.CONFIRM_SIGN_IN_WITH_OTP -> LoginResult.MultiFactorAuthenticationRequired
		else -> LoginResult.Failure(Throwable())
	}
}

Amplify config

{
  "UserAgent": "aws-amplify-cli/2.0",
  "Version": "1.0",
  "storage": {
    "plugins": {
      "awsS3StoragePlugin": {
        "bucket": "xxx",
        "region": "us-east-2"
      }
    }
  },
  "auth": {
    "plugins": {
      "awsCognitoAuthPlugin": {
        "UserAgent": "aws-amplify-cli/0.1.0",
        "Version": "0.1.0",
        "IdentityManager": {
          "Default": {
          }
        },
        "CognitoUserPool": {
          "Default": {
            "PoolId": "us-east-2_xxx",
            "AppClientId": "xxx",
            "AppClientSecret": "xxx",
            "Region": "us-east-2"
          }
        },
        "Auth": {
          "Default": {
            "OAuth": {
              "WebDomain": "us-east-xxx.auth.us-east-2.amazoncognito.com",
              "AppClientId": "xxx",
              "AppClientSecret": "xxx",
              "SignInRedirectURI": "xxx://",
              "SignOutRedirectURI": "xxx://",
              "Scopes": [
                "aws.cognito.signin.user.admin",
                "email",
                "openid",
                "phone",
                "profile"
              ],
              "QueryParameters": {
                "prompt": "select_account"
              }
            },
            "authenticationFlowType": "USER_SRP_AUTH",
            "loginMechanisms": [
              "PREFERRED_USERNAME"
            ],
            "signupAttributes": [
            ],
            "passwordProtectionSettings": {
              "passwordPolicyCharacters": [
              ]
            },
            "mfaTypes": [
            ],
            "verificationMechanisms": [
            ]
          }
        }
      }
    }
  }
}

Happy path logs

07:43:22.270  V  Auth State Change: NotConfigured(id=)
07:43:22.272  V  Auth State Change: ConfiguringAuth(id=)
07:43:22.272  V  InitAuthConfig Starting execution
07:43:22.273  V  Credential Store State Change: NotConfigured(id=)
07:43:22.273  V  Credential Store State Change: MigratingLegacyStore(id=)
07:43:22.274  V  MigrateLegacyCredentials Starting execution
07:43:22.284  V  MigrateLegacyCredentials Sending event LoadCredentialStore
07:43:22.285  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:43:22.286  V  LoadCredentialStore Starting execution
07:43:22.344  V  LoadCredentialStore Sending event CompletedOperation
07:43:22.345  V  Credential Store State Change: Success(storedCredentials=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)
07:43:22.345  V  MoveToIdleState Starting execution
07:43:22.345  V  MoveToIdleState Sending event MoveToIdleState
07:43:22.346  V  Credential Store State Change: Idle(id=)
07:43:22.346  V  InitAuthConfig Sending event ConfigureAuthentication
07:43:22.347  V  Auth State Change: ConfiguringAuthentication(authNState=NotConfigured(id=))
07:43:22.347  V  InitAuthNConfig Starting execution
07:43:22.347  V  InitAuthNConfig Sending event Configure
07:43:22.348  V  Auth State Change: ConfiguringAuthentication(authNState=Configured(id=))
07:43:22.348  V  ConfigureAuthN Starting execution
07:43:22.348  V  ConfigureAuthN Sending event InitializedSignedOut
07:43:22.348  V  ConfigureAuthN Sending event ConfiguredAuthentication
07:43:22.349  V  Auth State Change: ConfiguringAuthentication(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)))
07:43:22.349  V  Auth State Change: ConfiguringAuthorization(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=NotConfigured(id=))
07:43:22.349  V  InitAuthZConfig Starting execution
07:43:22.349  V  InitAuthZConfig Sending event Configure
07:43:22.350  V  Auth State Change: ConfiguringAuthorization(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Configured(id=))
07:43:22.350  V  ConfigureAuthZ Starting execution
07:43:22.350  V  ConfigureAuthZ Sending event ConfiguredAuthorization
07:43:22.351  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Configured(id=), authSignUpState=NotStarted(id=))
07:43:22.379  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=FetchingUnAuthSession(fetchAuthSessionState=NotStarted(id=)), authSignUpState=NotStarted(id=))
07:43:22.379  V  InitFetchUnAuthSession Starting execution
07:43:22.379  V  InitFetchUnAuthSession Sending event ThrowError
07:43:22.380  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=ConfigurationException{message=Identity Pool not configured., cause=null, recoverySuggestion=Please check amplifyconfiguration.json file.}, amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=NotStarted(id=))
07:43:22.384  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=RefreshingSession(existingCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86, refreshSessionState=NotStarted(id=)), authSignUpState=NotStarted(id=))
07:43:22.384  V  InitiateRefreshSession Starting execution
07:43:22.384  V  InitiateRefreshSession Sending event ThrowError
07:43:22.385  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=NotStarted(id=))
07:43:44.114  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=InitiatingSignUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=***, userId=null)))
07:43:44.114  V  InitiatingSignUp Starting execution
07:43:44.115  V  Credential Store State Change: Idle(id=)
07:43:44.115  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:43:44.115  V  LoadCredentialStore Starting execution
07:43:44.116  V  LoadCredentialStore Sending event CompletedOperation
07:43:44.116  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=null))
07:43:44.116  V  MoveToIdleState Starting execution
07:43:44.116  V  MoveToIdleState Sending event MoveToIdleState
07:43:44.116  V  Credential Store State Change: Idle(id=)
07:43:44.118  V  Credential Store State Change: Idle(id=)
07:43:44.118  V  Credential Store State Change: StoringCredentials(id=)
07:43:44.118  V  StoreCredentials Starting execution
07:43:44.120  V  StoreCredentials Sending event CompletedOperation
07:43:44.120  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=b0790a42-210d-46e3-a75d-e0d7b78f8235:1759297424117))
07:43:44.120  V  MoveToIdleState Starting execution
07:43:44.120  V  MoveToIdleState Sending event MoveToIdleState
07:43:44.120  V  Credential Store State Change: Idle(id=)
07:43:45.584  V  InitiatingSignUp Sending event InitiateSignUpComplete
07:43:45.587  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=AwaitingUserConfirmation(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=false, nextStep=AuthNextSignUpStep{signUpStep=CONFIRM_SIGN_UP_STEP, additionalInfo={}, codeDeliveryDetails=AuthCodeDeliveryDetails{destination='k***@a***', deliveryMedium=EMAIL, attributeName='email'}}, userId=xxx}))
07:44:02.040  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=ConfirmingSignUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx)))
07:44:02.040  V  ConfirmSignUp Starting execution
07:44:02.042  V  Credential Store State Change: Idle(id=)
07:44:02.042  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:44:02.042  V  LoadCredentialStore Starting execution
07:44:02.044  V  LoadCredentialStore Sending event CompletedOperation
07:44:02.044  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=b0790a42-210d-46e3-a75d-e0d7b78f8235:1759297424117))
07:44:02.045  V  MoveToIdleState Starting execution
07:44:02.045  V  MoveToIdleState Sending event MoveToIdleState
07:44:02.046  V  Credential Store State Change: Idle(id=)
07:44:04.588  V  ConfirmSignUp Sending event SignedUp
07:44:04.591  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@6942f86)), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:04.631  V  Auth State Change: Configured(authNState=SigningIn(signInState=NotStarted(id=)), authZState=SigningIn(id=), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:04.632  V  InitiateSignInAction Starting execution
07:44:04.632  V  InitiateSignInAction Sending event InitiateAutoSignIn
07:44:04.639  V  Auth State Change: Configured(authNState=SigningIn(signInState=AutoSigningIn(signInEventData=AutoSignInData(username=xxx, session=AYABeA5viO-0-zRJPQg_I0rMWTkAHQABAAdTZXJ2aWNlABBDb2duaXRvVXNlclBvb2xzAAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMjo0MTc1Njc5MDM0Njk6a2V5LzVjZDI0ZDRjLWVjNWItNGU4Ny05MGI2LTVkODdkOTZmY2RkMgC4AQIBAHhTLbUG2wPynKC5mzTBKxl69-lmDw7ReneEoHoGfx649wEWXxST2W1jEMz8MtzY-fTPAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMOtmpw44kMDAQNUlEAgEQgDvDf5F69c-8r15IjyUdVM87hd-_k8brqW305f1LnMpmp0_0l8RwqDEmCxnZ6DJILuJcS-a6m0OW-eY_HQIAAAAADAAAEAAAAAAAAAAAAAAAAADEpK9yZtljVzm0tsJalnIr_____wAAAAEAAAAAAAAAAAAAAAEAAAFug2wq6FJm52_O_3QhLre0evLqnQcp8mNBV9yTrRpDeNM9qoc-udWXare2REgnNOzJDIg06oRcb7QvjoOiUoiZ7kBklWcPbfhGt-dkXXHzIm4eL_2je1n8rTJnOzHHjbJfq7286owVPki6NpgnUiEovaq84_pEZ0UZZ8n-hadMI-Din-5FLZpcuRb88FnCIlhGcJWT2INTZ9qmWlXLhRWa9nNCvmpd_jUpD9D_G5uN3-1HjzTKfxHkksKoCIeFADis99a59GSh-djjkJy9rZrNc-FF7O10UOuFc9GxNzNOlPv_EC9Xdfxzbe70ggyz0cNfRRfXCgnTnYIAouxTo1Nx4OD4FBByhJ48ZVm2H3PybnuH7zDY1AIHCIaS8va3zWooGb3zoCRd6EGVZIcqZXbi-z2Cp8zH83PrJb7CeKgWhdcNRnHb1BsXdyYlkyAZDXxObYqbgIWmXxMBe32-5o6fo6RwSR-PVN1rSW5HITfbTU7Iv9kmrg5aPn8FoyYGOA, metadata={}, userId=xxx))), authZState=SigningIn(id=), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:04.639  V  AutoSignIn Starting execution
07:44:04.641  V  Credential Store State Change: Idle(id=)
07:44:04.642  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:44:04.642  V  LoadCredentialStore Starting execution
07:44:04.645  V  LoadCredentialStore Sending event CompletedOperation
07:44:04.645  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=b0790a42-210d-46e3-a75d-e0d7b78f8235:1759297424117))
07:44:04.646  V  MoveToIdleState Starting execution
07:44:04.646  V  MoveToIdleState Sending event MoveToIdleState
07:44:04.647  V  Credential Store State Change: Idle(id=)
07:44:05.270  V  AutoSignIn Sending event ConfirmDevice
07:44:05.273  V  Auth State Change: Configured(authNState=SigningIn(signInState=ConfirmingDevice(id=)), authZState=SigningIn(id=), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:05.274  V  ConfirmDevice Starting execution
07:44:05.969  V  Credential Store State Change: Idle(id=)
07:44:05.970  V  Credential Store State Change: StoringCredentials(id=)
07:44:05.971  V  StoreCredentials Starting execution
07:44:05.998  V  StoreCredentials Sending event CompletedOperation
07:44:06.001  V  Credential Store State Change: Success(storedCredentials=DeviceData(deviceMetadata=Metadata(deviceKey=us-east-2_xxx, deviceGroupKey=xxx, deviceSecret=239cd186-aadb-42f4-b933-1631494952ea)))
07:44:06.003  V  MoveToIdleState Starting execution
07:44:06.003  V  MoveToIdleState Sending event MoveToIdleState
07:44:06.004  V  Credential Store State Change: Idle(id=)
07:44:06.006  V  ConfirmDevice Sending event SignInCompleted
07:44:06.011  V  Auth State Change: Configured(authNState=SignedIn(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)), deviceMetadata=Metadata(deviceKey=us-east-2_xxx, deviceGroupKey=xxx, deviceSecret=null)), authZState=FetchingAuthSession(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)), fetchAuthSessionState=NotStarted(id=)), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:06.011  V  InitFetchAuthSession Starting execution
07:44:06.012  V  InitFetchAuthSession Sending event ThrowError
07:44:06.019  V  Auth State Change: Configured(authNState=SignedIn(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)), deviceMetadata=Metadata(deviceKey=us-east-2_xxx, deviceGroupKey=xxx, deviceSecret=null)), authZState=StoringCredentials(amplifyCredential=UserPool(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)))), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))
07:44:06.021  V  PersistCredentials Starting execution
07:44:06.024  V  Credential Store State Change: Idle(id=)
07:44:06.025  V  Credential Store State Change: StoringCredentials(id=)
07:44:06.026  V  StoreCredentials Starting execution
07:44:06.046  V  StoreCredentials Sending event CompletedOperation
07:44:06.047  V  Credential Store State Change: Success(storedCredentials=UserPool(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***))))
07:44:06.048  V  MoveToIdleState Starting execution
07:44:06.048  V  MoveToIdleState Sending event MoveToIdleState
07:44:06.049  V  Credential Store State Change: Idle(id=)
07:44:06.049  V  PersistCredentials Sending event ReceivedCachedCredentials
07:44:06.053  V  Auth State Change: Configured(authNState=SignedIn(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)), deviceMetadata=Metadata(deviceKey=us-east-2_xxx, deviceGroupKey=xxx, deviceSecret=null)), authZState=SessionEstablished(amplifyCredential=UserPool(signedInData=SignedInData(userId=xxx, username=xxx, signedInDate=Wed Oct 01 07:44:05 GMT+02:00 2025, signInMethod=ApiBased(authType=USER_AUTH), cognitoUserPoolTokens=CognitoUserPoolTokens(idToken = eyJra***, accessToken = eyJra***, refreshToken = eyJjd***)))), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=xxx}))

Unhappy path logs (wrong confirmation code, then correct)

07:45:29.668  V  Auth State Change: NotConfigured(id=)
07:45:29.669  V  Auth State Change: ConfiguringAuth(id=)
07:45:29.670  V  InitAuthConfig Starting execution
07:45:29.672  V  Credential Store State Change: NotConfigured(id=)
07:45:29.672  V  Credential Store State Change: MigratingLegacyStore(id=)
07:45:29.672  V  MigrateLegacyCredentials Starting execution
07:45:29.685  V  MigrateLegacyCredentials Sending event LoadCredentialStore
07:45:29.685  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:45:29.686  V  LoadCredentialStore Starting execution
07:45:29.744  V  LoadCredentialStore Sending event CompletedOperation
07:45:29.745  V  Credential Store State Change: Success(storedCredentials=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)
07:45:29.745  V  MoveToIdleState Starting execution
07:45:29.745  V  MoveToIdleState Sending event MoveToIdleState
07:45:29.746  V  Credential Store State Change: Idle(id=)
07:45:29.746  V  InitAuthConfig Sending event ConfigureAuthentication
07:45:29.747  V  Auth State Change: ConfiguringAuthentication(authNState=NotConfigured(id=))
07:45:29.747  V  InitAuthNConfig Starting execution
07:45:29.747  V  InitAuthNConfig Sending event Configure
07:45:29.748  V  Auth State Change: ConfiguringAuthentication(authNState=Configured(id=))
07:45:29.748  V  ConfigureAuthN Starting execution
07:45:29.748  V  ConfigureAuthN Sending event InitializedSignedOut
07:45:29.748  V  ConfigureAuthN Sending event ConfiguredAuthentication
07:45:29.749  V  Auth State Change: ConfiguringAuthentication(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)))
07:45:29.749  V  Auth State Change: ConfiguringAuthorization(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=NotConfigured(id=))
07:45:29.749  V  InitAuthZConfig Starting execution
07:45:29.749  V  InitAuthZConfig Sending event Configure
07:45:29.750  V  Auth State Change: ConfiguringAuthorization(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Configured(id=))
07:45:29.751  V  ConfigureAuthZ Starting execution
07:45:29.751  V  ConfigureAuthZ Sending event ConfiguredAuthorization
07:45:29.751  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Configured(id=), authSignUpState=NotStarted(id=))
07:45:29.777  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=FetchingUnAuthSession(fetchAuthSessionState=NotStarted(id=)), authSignUpState=NotStarted(id=))
07:45:29.777  V  InitFetchUnAuthSession Starting execution
07:45:29.778  V  InitFetchUnAuthSession Sending event ThrowError
07:45:29.779  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=ConfigurationException{message=Identity Pool not configured., cause=null, recoverySuggestion=Please check amplifyconfiguration.json file.}, amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=NotStarted(id=))
07:45:29.782  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=RefreshingSession(existingCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12, refreshSessionState=NotStarted(id=)), authSignUpState=NotStarted(id=))
07:45:29.782  V  InitiateRefreshSession Starting execution
07:45:29.782  V  InitiateRefreshSession Sending event ThrowError
07:45:29.783  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=NotStarted(id=))
07:45:42.441  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=InitiatingSignUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=***, userId=null)))
07:45:42.442  V  InitiatingSignUp Starting execution
07:45:42.442  V  Credential Store State Change: Idle(id=)
07:45:42.442  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:45:42.443  V  LoadCredentialStore Starting execution
07:45:42.443  V  LoadCredentialStore Sending event CompletedOperation
07:45:42.444  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=null))
07:45:42.444  V  MoveToIdleState Starting execution
07:45:42.444  V  MoveToIdleState Sending event MoveToIdleState
07:45:42.444  V  Credential Store State Change: Idle(id=)
07:45:42.447  V  Credential Store State Change: Idle(id=)
07:45:42.447  V  Credential Store State Change: StoringCredentials(id=)
07:45:42.448  V  StoreCredentials Starting execution
07:45:42.450  V  StoreCredentials Sending event CompletedOperation
07:45:42.451  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=xxx))
07:45:42.452  V  MoveToIdleState Starting execution
07:45:42.452  V  MoveToIdleState Sending event MoveToIdleState
07:45:42.452  V  Credential Store State Change: Idle(id=)
07:45:44.084  V  InitiatingSignUp Sending event InitiateSignUpComplete
07:45:44.085  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=AwaitingUserConfirmation(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx), signUpResult=AuthSignUpResult{isSignUpComplete=false, nextStep=AuthNextSignUpStep{signUpStep=CONFIRM_SIGN_UP_STEP, additionalInfo={}, codeDeliveryDetails=AuthCodeDeliveryDetails{destination='k***@a***', deliveryMedium=EMAIL, attributeName='email'}}, userId=xxx}))
07:45:48.183  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=ConfirmingSignUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=xxx)))
07:45:48.183  V  ConfirmSignUp Starting execution
07:45:48.185  V  Credential Store State Change: Idle(id=)
07:45:48.185  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:45:48.185  V  LoadCredentialStore Starting execution
07:45:48.188  V  LoadCredentialStore Sending event CompletedOperation
07:45:48.188  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=xxx))
07:45:48.189  V  MoveToIdleState Starting execution
07:45:48.189  V  MoveToIdleState Sending event MoveToIdleState
07:45:48.189  V  Credential Store State Change: Idle(id=)
07:45:48.675  V  ConfirmSignUp Sending event ThrowError
07:45:48.677  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=Error(exception=CodeMismatchException(message=Invalid verification code provided, please try again.), hasNewResponse=true))
07:45:48.682  E  DefaultErrorHandler handled error (Ask Gemini)
                 CodeMismatchException{message=Confirmation code entered is not correct., cause=CodeMismatchException(message=Invalid verification code provided, please try again.), recoverySuggestion=Enter correct confirmation code.}
                 	at com.amplifyframework.auth.cognito.CognitoAuthExceptionConverter$Companion.lookup(CognitoAuthExceptionConverter.kt:73)
                 	at com.amplifyframework.auth.cognito.usecases.ConfirmSignUpUseCase$execute$result$2.invokeSuspend(ConfirmSignUpUseCase.kt:59)
                 	at com.amplifyframework.auth.cognito.usecases.ConfirmSignUpUseCase$execute$result$2.invoke(Unknown Source:11)
                 	at com.amplifyframework.auth.cognito.usecases.ConfirmSignUpUseCase$execute$result$2.invoke(Unknown Source:6)
                 	at kotlinx.coroutines.flow.FlowKt__LimitKt$transformWhile$1$invokeSuspend$$inlined$collectWhile$1.emit(Limit.kt:132)
                 	at kotlinx.coroutines.flow.FlowKt__LimitKt$drop$2$1.emit(Limit.kt:22)
                 	at kotlinx.coroutines.flow.StateFlowImpl.collect(StateFlow.kt:401)
                 	at kotlinx.coroutines.flow.StateFlowImpl$collect$1.invokeSuspend(Unknown Source:15)
                 	at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:34)
                 	at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:100)
                 	at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:586)
                 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:829)
                 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:717)
                 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:704)
                 Caused by: CodeMismatchException(message=Invalid verification code provided, please try again.)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.model.CodeMismatchException$Builder.build(CodeMismatchException.kt:60)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.serde.CodeMismatchExceptionDeserializer.deserialize(CodeMismatchExceptionDeserializer.kt:35)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.serde.ConfirmSignUpOperationDeserializerKt.throwConfirmSignUpError(ConfirmSignUpOperationDeserializer.kt:60)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.serde.ConfirmSignUpOperationDeserializerKt.access$throwConfirmSignUpError(ConfirmSignUpOperationDeserializer.kt:1)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.serde.ConfirmSignUpOperationDeserializer.deserialize(ConfirmSignUpOperationDeserializer.kt:34)
                 	at aws.sdk.kotlin.services.cognitoidentityprovider.serde.ConfirmSignUpOperationDeserializer.deserialize(ConfirmSignUpOperationDeserializer.kt:29)
                 	at aws.smithy.kotlin.runtime.http.operation.DeserializeHandler.call(SdkOperationExecution.kt:351)
                 	at aws.smithy.kotlin.runtime.http.operation.DeserializeHandler$call$1.invokeSuspend(Unknown Source:15)
                 	... 6 more
07:46:04.952  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=ConfirmingSignUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=***, userId=null)))
07:46:04.953  V  ConfirmSignUp Starting execution
07:46:04.955  V  Credential Store State Change: Idle(id=)
07:46:04.956  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:46:04.956  V  LoadCredentialStore Starting execution
07:46:04.959  V  LoadCredentialStore Sending event CompletedOperation
07:46:04.960  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=xxx))
07:46:04.962  V  MoveToIdleState Starting execution
07:46:04.963  V  MoveToIdleState Sending event MoveToIdleState
07:46:04.963  V  Credential Store State Change: Idle(id=)
07:46:06.234  V  ConfirmSignUp Sending event SignedUp
07:46:06.237  V  Auth State Change: Configured(authNState=SignedOut(signedOutData=SignedOutData(lastKnownUsername=null, hostedUIErrorData=null, globalSignOutErrorData=null, revokeTokenErrorData=null)), authZState=Error(exception=SessionError(exception=java.lang.Exception: Credentials empty, cannot refresh., amplifyCredential=com.amplifyframework.statemachine.codegen.data.AmplifyCredential$Empty@af3be12)), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=null), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=null}))
07:46:06.247  V  Auth State Change: Configured(authNState=SigningIn(signInState=NotStarted(id=)), authZState=SigningIn(id=), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=null), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=null}))
07:46:06.247  V  InitiateSignInAction Starting execution
07:46:06.247  V  InitiateSignInAction Sending event InitiateAutoSignIn
07:46:06.250  V  Auth State Change: Configured(authNState=SigningIn(signInState=AutoSigningIn(signInEventData=AutoSignInData(username=xxx, session=AYABeL3ZWpNDrfb4jwa1HNXIfkkAHQABAAdTZXJ2aWNlABBDb2duaXRvVXNlclBvb2xzAAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMjo0MTc1Njc5MDM0Njk6a2V5LzVjZDI0ZDRjLWVjNWItNGU4Ny05MGI2LTVkODdkOTZmY2RkMgC4AQIBAHhTLbUG2wPynKC5mzTBKxl69-lmDw7ReneEoHoGfx649wFLEY-flPMZJMi0_FPDHURiAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM5oytauo1EBXP7dqHAgEQgDsQ_PfS_Q_Mbeca6HzDRMaF1zWFJ-8jNw6NhCKAudu2V-0DF9saHl7OL7kw9w4PUmlFSQ046KucyApCdQIAAAAADAAAEAAAAAAAAAAAAAAAAAA_A0aa0LaFSIgk7-Mcfpc5_____wAAAAEAAAAAAAAAAAAAAAEAAAFkxjIuAd_e9r5Tbqkf8cset5W15evy8zAEKH4AUcg5wqHs8R3bsVknahs3_jF4_DwQ84bgTe1zak7uieQQ8OM7XA9wAO_H92lMOtwLqwRsICaYevjiu1_fllIBjswXUrMq6wjZGfqhmdJYAq7ckKzh1egfu8IHvxHUJKi6dwA1k2hxFcli5FvxG0RLKFGHG2tF3vQePCLkO68NJk8awQHG7usbBxPoFMULUFhu9ywvN4GivRr_FhAmMWiaJ5if3K6LxX_rgHc3oBVBzeSH4uikBBYMwNMZcmLfDlIb1OPWQJGJBgS32P9QwP8K-Lc5DusAc-B8cpZZeaUg5iWxvbPTvLlnWihg0PHYXV-s2_TbYly5C9Js3PFZ-AdsYO102MH8UodoOwIjcZC6m00zrso0ersZP9EU5FlRoCQzW_70IlOWE4ZWgCqsHKKZH444enoJxM-NFUkP8BUFHoc8DK2y9RTpciTxpZb-r1sB1_bNwUVUruL8, metadata={}, userId=null))), authZState=SigningIn(id=), authSignUpState=SignedUp(signUpData=SignUpData(username='xxx', validationData=null, clientMetadata=null, session=AYAB***, userId=null), signUpResult=AuthSignUpResult{isSignUpComplete=true, nextStep=AuthNextSignUpStep{signUpStep=COMPLETE_AUTO_SIGN_IN, additionalInfo={}, codeDeliveryDetails=null}, userId=null}))
07:46:06.251  V  AutoSignIn Starting execution
07:46:06.254  V  Credential Store State Change: Idle(id=)
07:46:06.254  V  Credential Store State Change: LoadingStoredCredentials(id=)
07:46:06.255  V  LoadCredentialStore Starting execution
07:46:06.259  V  LoadCredentialStore Sending event CompletedOperation
07:46:06.261  V  Credential Store State Change: Success(storedCredentials=ASFDevice(id=xxx))
07:46:06.261  V  MoveToIdleState Starting execution
07:46:06.262  V  MoveToIdleState Sending event MoveToIdleState
07:46:06.263  V  Credential Store State Change: Idle(id=)
07:46:06.626  V  AutoSignIn Sending event ReceivedChallenge

[mattcreaser]

Thanks @KamilSucharski. We've reproduce your error and are investigating the issue.