I have two tenants set up - one for Dev and one for Production. Both have worked for a few years using Embedded Lock. We are moving to Universal Login and have always had our Callback URLS whitelisted in our settings properly - they work with currently.
On the Dev side, our login works perfectly fine - we are not using a custom domain there, but rather the default Auth0 urls. On the Dev tenant, config.callbackURL
returns as expected and the auth flow goes through.
On our Production tenant, we have a Custom Domain and the config.callbackURL
returns ‘{YOUR_APP_CALLBACK_URL}’ so the auth fails.
Not sure what would be causing this - we’re using the exact same Lock code in both tenants, the only difference is the tenant (and associated whitelisted callback URLS) and the Custom Domain.
Here is our lock code:
`
`