Magnito

Free and open Amazon Cognito emulator for Amplify UI, Hosted UI, and Managed Login.

Run user pool APIs, Amplify UI authentication, and browser-based OAuth sign-in locally without AWS Cognito. Hosted UI-style redirects use Magnito's Managed Login pages; the classic Hosted UI appearance and DOM/CSS are not reproduced.

Images

Docker Hub - https://hub.docker.com/r/frourio/magnito

Amazon ECR Public Gallery - https://gallery.ecr.aws/frourio/magnito

Usage

Docker Compose

compose.yml

services:
  magnito:
    image: frourio/magnito:latest
    ports:
      - 5050:5050 # Cognito API / Web interface
      - 5051:5051 # OAuth2 SSL endpoint
    environment:
      PORT: 5050
      SSL_PORT: 5051
      COGNITO_USER_POOL_ID: ap-northeast-1_example
      COGNITO_USER_POOL_CLIENT_ID: example-client-name
      # COGNITO_USER_POOL_CLIENT_SECRET: change_me_to_at_least_24_characters
      COGNITO_ACCESS_KEY: magnito-access-key
      COGNITO_SECRET_KEY: magnito-secret-key
      COGNITO_REGION: ap-northeast-1
      SMTP_HOST: inbucket
      SMTP_PORT: 2500
      SMTP_USER: fake_mail_user
      SMTP_PASS: fake_mail_password
    volumes:
      - magnito:/usr/src/app/data

  inbucket:
    image: inbucket/inbucket:3.0.3
    ports:
      - 2500:2500 # SMTP
      - 9000:9000 # web interface
    volumes:
      - inbucket:/storage

volumes:
  magnito:
    driver: local
  inbucket:
    driver: local

COGNITO_USER_POOL_CLIENT_SECRET is optional and applies to the default app client. Set a 24–64 character value containing letters, digits, underscores, or +. On startup, Magnito replaces the default client's stored secret when this value changes; removing the variable removes its secrets. An unchanged value leaves an additional rotation secret in place.

Web UI

You can access the Magnito web interface at https://localhost:5051.

Hosted UI / Managed Login

Configure a user pool domain with ManagedLoginVersion: 2. The app client needs AllowedOAuthFlowsUserPoolClient: true, the code OAuth flow, an allowed callback URL and scopes, and its assigned identity providers. You can set these through Magnito's Cognito-compatible user pool APIs.

Open the authorization URL in a browser, using your configured app client and callback URL:

https://localhost:5051/oauth2/authorize?response_type=code&client_id=<client-id>&redirect_uri=<encoded-callback-url>&scope=openid&state=<opaque-state>

Magnito displays its Managed Login UI for password sign-in, sign-up, confirmation, and password recovery. It supports English and Japanese. After sign-in, Magnito redirects to the callback URL with an authorization code that the app can exchange at /oauth2/token. A Hosted UI integration can use the same OAuth endpoints and redirect flow.

SMTP Server UI

You can check the emails sent by Magnito with Inbucket.

Inbucket - http://localhost:9000/

Screenshots

Managed Login

Amplify UI and admin

Sign Up	Sign In

Forgot Password	Admin

Profile	Change Password

Features

Hosted UI / Managed Login

OAuth authorization code sign-in with a browser redirect and /oauth2/token exchange.
Password sign-in, sign-up, account confirmation, and password recovery.
Configurable branding and assigned identity providers, with English and Japanese UI.

Amplify UI and admin

Sign Up
- Create a new user account by entering an email address and password.
- Passwords must have at least 8 characters, at least one uppercase letter, at least one lowercase letter, at least one number, and at least one special character.
Sign In
- Sign in with your email address and password.
- Sign in with Google / Apple / Amazon / Facebook emulators.
- Support MFA with TOTP.
Forgot Password
- Send a password reset email to the email address you registered with.
Reset Password
- Reset your password by entering a old password and a new password.
Admin
- List all user information.
Profile
- Check your user information.

Implementation Coverage List

57/129 implemented

License

MIT

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
.vscode		.vscode
batches		batches
certificates		certificates
data		data
docs		docs
prisma		prisma
public/images		public/images
server		server
src		src
tests		tests
.dockerignore		.dockerignore
.env.example		.env.example
.gitignore		.gitignore
.oxfmtrc.json		.oxfmtrc.json
.oxlintrc.json		.oxlintrc.json
Dockerfile		Dockerfile
LICENSE		LICENSE
Makefile		Makefile
README.md		README.md
compose.yml		compose.yml
docker-entrypoint.sh		docker-entrypoint.sh
package-lock.json		package-lock.json
package.json		package.json
prisma.config.ts		prisma.config.ts
stylelint.config.js		stylelint.config.js
tsconfig.json		tsconfig.json
vite.config.ts		vite.config.ts
vitest.config.ts		vitest.config.ts

Navigation Menu

Repository navigation

About

Repository files navigation

Magnito

Images