HA sign up with email/password: The check to see if a user with that email exists happens too late.

[ssveta7ak]

What happened?

HA sign up with email/password: The check to see if a user with that email exists happens too late.

What did you expect to happen?

Preconditions:

You must already sign up to Cognito with email/password.

How'd it happen?

1. Open any link in your browser and select the option to sign up using an email and password.
   

2. Enter your username, email, and password, then click "Sign Up."
   The system will direct you to a window asking for a verification code. However, there should be a notification informing the user that an account with this email already exists.

3. After entering the verification code, the user is informed that an account with this email already exists, but there's no option to go back to the previous page to edit the input fields.

What's your environment like?

Core
v0.20.0-473-g3e330bb7 + 3e330bb

Enterprise
v0.22.0 + 714e77f2 + 2023-08-04T23:47:44 + 01:00

What's your config.yaml?

authenticate_service_url: https://authenticate.pomerium.app

What did you see in the logs?

# Paste your logs here.
# Be sure to scrub any sensitive values

Additional context

Add any other context about the problem here.

[wasaga]

this is not our UI, this is a dialog from Amazon Cognito.

I'm not sure I understand what's wrong with this flow. You filled in the details in the Sign Up form, and they say yes, this account already exists.

They want to double check that you still have access to the original email, thus the verification code.