Create a Simple and Secure Node Express App

Blog Discussions
, , , ,
52

@zettiliazee I checked with our Sales team and got as response that redirect rules are included in all plans, including the free plan. We don’t have a limit on that feature, so even if you were to purchase Auth0 through Heroku, that should not cause any issue regarding redirect rules. It could be something related to the actual deployment. Were you deploying this the end-result of this tutorial straight up?

I do recall there is a nuance with Heroku deployments. I wonder if these could help you out:

From Login README:

If you’re using a hosting provider that uses a proxy in front of Node.js, comment in the trust proxy configuration in app.js. This is a express-session configuration setting that allows for trusting this first proxy.

There’s also another issue related to cookies and setup:

Adding the following code fixed that issue but I think your error message is different :thinking:

if (app.get("env") === "production") {
  // trust first proxy for Heroku production deployment
  app.set("trust proxy", 1);
  // serve secure cookies, requires https
  sessionOptions.cookie.secure = true;
}