Your Cognito Login Code Fails Because the App Client Never Allowed That Auth Flow

A Cognito sign-in failure can be caused by app client settings, not by the login code itself.

In this case, USER_PASSWORD_AUTH was not enabled and the client secret required a SECRET_HASH.

Other client-specific settings like MFA, token validity, and Hosted UI OAuth callbacks/scopes can also break auth flows.

Infrawise reads live user pool and app client metadata from AWS so assistants can generate code that matches the deployed setup.