"Not Authorized to access " error on create mutation + GraphQL

Question

I'm running the below GraphQL query to create data on dynamodb table, but gets the response with "Not Authorized to access createClient on type Client"

Why this is happening at.

GraphQL query:

`mutation addClient{
  createClient(input:{
    fullName: "Jhon Smith"
    title: "Software Engineer"
    organization: "AWS"
    contactNo: "[phone]"
    email: "[email protected]"
    country: "Canada"
    address: "AN/458, Norton place, Down Town"    
  }){
    fullName
  }
}`

Response :

{
  "data": {
    "createClient": null
  },
  "errors": [
    {
      "path": [
        "createClient"
      ],
      "data": null,
      "errorType": "Unauthorized",
      "errorInfo": null,
      "locations": [
        {
          "line": 2,
          "column": 3,
          "sourceName": null
        }
      ],
      "message": "Not Authorized to access createClient on type Client"
    }
  ]
}

Twopenny

Is it possible that the HTTP client that sends the GraphQL query to the server need to also send an Authorization header with an authentication token? (or some other form of authentication) – Hysterectomize

Seems yes. it needs some autorization. Do you have any samples for that? – Twopenny

Answer 1

It solved with authMode

const newTodo = await API.graphql({ query: mutations.createClient, variables: {input: inputData}, authMode: "AMAZON_COGNITO_USER_POOLS" });

Twopenny

Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center. – Gnarly

This answer worked for me, some more info in the amplify docs – Bartizan

Answer 2

Make sure your model @auth directive has ... operation: [create, ...] included. This is what I was running into.

Idolum

Answer 3

I had similar issue with the error - error fetching {"data": {"createTodo": null}, "errors": [{"data": null, "errorInfo": null, "errorType": "Unauthorized", "locations": [Array], "message": "Not Authorized to access createTodo on type Mutation", "path": [Array]}]}

Turn out the amplifyconfiguration.json file had "aws_appsync_authenticationType": "API_KEY" where "API_KEY" shall be replaced with "AMAZON_COGNITO_USER_POOLS"

Prodigy