Hi Xiaofeng

Have you tried changing the log level from info to debug here: https://github.com/TimothyJones/github-cognito-openid-wrapper/blob/40e7cc4aeeba21d9528dbfbdc859b32ba50021e6/src/connectors/logger.js#L11

After doing that you should see more info in your CloudWatch logs — perhaps the sub isn’t being returned from GitHub correctly?