When creating an App Client in cognito, the generate client secret box must be unchecked because the JavaScript SDK doesn't support apps that have a client secret. Else you will get a error "Client 4p0o86nuq106dgkmpl11aej8vi is configured for secret but secret was not received" sign up sign in