(Bonus Points) Device tracking

  1. Turn on device tracking in your User Pool under Devices.

  1. Try to sign-in again and notice the additional calls to start tracking device (notice that you don’t need any coding changes to make this happen unless you need users to opt-in then you need to capture user’s consent and manually confirm the device).

  1. Try to use refresh_token on another device (for example from CLI or Postman). This should fail since refresh_token is tied to device key