# BadRequestError: checks.state argument is missing - login after logout

**URL:** <https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850>\
**Category:** Get Help\
**Tags:** bug, auth0, login\
**Created:** [April 27, 2021, 3:28pm UTC](https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850 "2021-04-27T15:28:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ygribaudo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ygribaudo/32/26050_2.png) [@ygribaudo](https://community.auth0.com/u/ygribaudo)\
**Post date:** [April 27, 2021, 3:28pm UTC](https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850/1 "2021-04-27T15:28:26Z")

</div>

Hello, I have a node backend with a React frontend. I´m using express-openid-connect with Auth0 for authentication. Sometimes, when the users logs out and then logs in they find this error:

‘’‘BadRequestError: checks.state argument is missing  
at callbackStack (/home/node/node\_modules/express-openid-connect/middleware/auth.js:109:31)  
at process.\_tickCallback (internal/process/next\_tick.js:68:7)’‘’

It happends in development and production, with all IDPs ( Gmail and Outlook). And I see that the user succesfully login and logout from the Auth0 Dashboards.

Any ides why this is happening?

---

<div class="post-metadata">

**Author:** ![ygribaudo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ygribaudo/32/26050_2.png) [@ygribaudo](https://community.auth0.com/u/ygribaudo)\
**Post date:** [April 28, 2021, 11:10am UTC](https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850/2 "2021-04-28T11:10:55Z")

</div>

The problem was a middleware in express routes that set the cache-control header of the /callback. I now know that the express-openid-connect calls should not be cache.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [April 28, 2021, 1:03pm UTC](https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850/3 "2021-04-28T13:03:16Z")

</div>

Perfect! Thanks for sharing it with the rest of community!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [April 29, 2021, 12:36pm UTC](https://community.auth0.com/t/badrequesterror-checks-state-argument-is-missing-login-after-logout/61850/4 "2021-04-29T12:36:24Z")

</div>