Auth0 Bearer Token SID Repeats Across Users

Get Help
,
1

Hi everyone,

I’m encountering an issue with Auth0’s bearer tokens, specifically regarding the sid (session ID) claim.

Here’s what happened:

  1. I was logged in as User A, and their session eventually expired.
  2. Afterwards, I logged in as User B.
  3. I noticed that the new bearer token for User B contained the same sid value that was previously issued to User A.

Is this expected behavior? Shouldn’t the sid be unique per user session?
Could this be a misconfiguration on my end, or is it potentially a bug within Auth0?

Any insights or experiences with similar behavior would be greatly appreciated. Thanks in advance!