client.getTokenSilently always fails

[bbz]

I have several apps using a similar setup.
In my current app getTokenSilently always fails.
In my network tab I see 2 authorize? calls
In my other app I see one authorize call and a token calls
When I use my new config with a previous implementation it also fails.
Really hitting a wall here, hope someone can give me some pointer?

Best, Bas

[dan.woda]

Hi @bbz,

Can you give us some more context, maybe post the code associated with this error?

Thanks,
Dan

[bbz]

const client$: Observable<Auth0Client> = defer(() => createAuth0Client(auth0Config())).pipe(shareReplay(1))

export const createClient = () => client$

export enum Status {
  CheckingAuth = 'CheckingAuth',
  Authenticated = 'Authenticated',
  NotAuthenticated = 'NotAuthenticated'
}

export function useAuthStatus() {
  const [status, setStatus] = useState<Status>(Status.CheckingAuth)
  const dispatch = useDispatch()

  useEffect(() => {
    createClient().subscribe(client => {
      Promise.all([client.getTokenSilently(), client.getUser()])
        .then(([token, userData]) => {
          // this never happens
          dispatch(setLoginSuccess(token, userData))

          setStatus(Status.Authenticated)
        })
        .catch(e => {
          console.error(e)
          setStatus(Status.NotAuthenticated)
        })
    })
  }, [])

  return status
}

[bbz]

Hi Dan, happy to share. Let me know if you need more context.

[dan.woda]

How is it failing? Are you getting an error of some kind? If you are, can you copy and paste the error here.

[bbz]

error: "login_required"
error_description: "Login required"
state: "d2lHRThLYkVoMGdwRmJ2cGpnbG1DamM5cTdBUHVlbWZhTUVhRGJGUE9SWg=="

[dan.woda]

Typically this error is signaling that there is no session/cookie to validate and the user must provide credentials to get a new token. This could be an issue with a browser or extension blocking cookies. What browser are you using?

[bbz]

Chrome and Firefox, I’ve read that there are issues with Safari. Is there a way to find out what’s wrong with the session?

[bbz]

This is starting to get to me.
I’ve downloaded the React SPA sample code, update my settings.
Same thing I can login but silent authentication always fails

[dan.woda]

Can you DM me a HAR of the transaction?

Generate and Analyze HAR Files

[bbz]

You got mail!

[dan.woda]

Okay, I took a look at the HAR. Everything looks normal.

Can you try a few things for me?

• Try it in an incognito tab
• Try it on another browser if you have one
• Finally, if neither of those work, try downloading a quickstart and see if that works okay.

[bbz]

• Try it in an incognito tab
  The har I sent you was made in incognito
• Try it on another browser if you have one
  I’ve tried Chrome and Firefox
• Finally, if neither of those work, try downloading a quickstart and see if that works okay.
  If the quickstart include the React Spa example, I downloaded it and the har was made with that.
  If not do you have a link?
  In the meantime I’ll try and sent you a screen recording

Best, Bas

[bbz]

I see, that’s not possible… any other options?

[dan.woda]

I know it is unlikely, but have you blocked third party cookies in both browsers?

Clear, enable, and manage cookies in Chrome - Computer - Google Chrome Help

Third-party cookies and Firefox tracking protection | Firefox Help

[bbz]

Do you see any setting I should change?

[dan.woda]

Looks good to me, thanks for showing it.

[bbz]

@dan.woda

I see that the application you are using has "sso_disabled": true . This is something that must be set via the management API.

As to how it got set like this, I am not sure, but setting it to false should solve the problem.

I used

You can use the management API explorer to update it if you don’t want to write a script.

Auth0 Management API v2

To update the setting, now it completely works as expected!

[dan.woda]

Thanks for following up!