has there been a change to user auth flow for `atm...
# atmos
d
has there been a change to user auth flow for
atmos auth login
? Now I get a redirect to sign in in the browser rather than with my access keys
redirected here
but it doesnt work on the atmos response
Copy code
x Authentication failed

   Authenticate Credential Chain

   Error: authentication failed: failed to authenticate via credential chain for identity "core-root": authentication failed: AWS user identity "core-root" authentication failed: failed to exchange authorization code for credentials: INVALID_REQUEST:  (HTTP 400, endpoint: <https://signin.aws.amazon.com/v1/token>)

   Error

   Error: authentication failed: identity=core-root: authentication failed: failed to authenticate via credential chain for identity "core-root": authentication failed: AWS user identity "core-root" authentication failed: failed to exchange authorization code for credentials: INVALID_REQUEST:  (HTTP 400, endpoint: <https://signin.aws.amazon.com/v1/token>)
e
for IAM users, this is the default behavior if credentials are not configured
cc @Ben Smith (Cloud Posse)
Now I get a redirect to sign in in the browser rather than with my access keys
Could it not be finding your access keys
have you recently reconfigured the user?
d
I tried reconfiguring the user, but still get redirected to the URL rather than using keychain access keys
b
IAM users should use the Webflow login, unless you have AWS access keys and secret keys set for that profile and identity.
d
either way is fine by me, but I cant get either to work
I have access keys. can I disable webflow?
b
d
perfect, ty
that worked. Thank you!
🙌 1
👍 1
e
sounds like maybe a bug then? if it's not finding creds without disabling webflow
d
yeah when I set version to 1.214 it worked again. but disabling webflow worked. my config was this:
Copy code
auth:
  identities:
    core-root:
      kind: aws/user
      credentials:
        region: us-east-1
        mfa_arn: "arn:aws:iam::12346:mfa/acme-superadmin-1password"
e
👀 1
See if it works without the override
d
ty, yes I’ll give that a try tomorrow