mheffner / rails-cognito-example Goto Github PK

Not really an issue, but I'm wondering how to force Cognito to require login credentials upon each login request. Using your repository I am forcing a logout prior to the Cognito 1 hour token expiration. This works fine as the cognito_token is deleted. However, when I attempt to sign in via sign in link and the Cognito UI I am presented with a form to either sign in using the previous user just logged out or to click on a link to sign in as another user. Clicking on the button to sign in as a the previous user logs me in without requesting a password or MFA, this is an issue. I am wondering is this is a setting on the Cognito side of things as I can delete the sessions and cognito_sessions and I still encounter this problem. Any help in implementing this will be really helpful. Ultimately my goal is to simply force a signout and require full Cognito authentication once again. Thanks.