Custom Domain Universal Login - Sign Up Works, but Login Fails with "Invalid state" Error

[sumansaurav]

So, the ‘Invalid State’ error caused due to state parameter missing or not matching from initial value.

Here is few community post that could help you:

Getting invalid state on redirect

Hi @Anupamc, Thanks for reaching out to the Auth0 Community! An invalid state error happens when the returned state value does not match the state value that was passed in the initial login request. This is explained in more detail in this related post. Could you please confirm if the state value passed in the login request matches the state value in the response?

Invalid state on reload Auth0 callback url, using auth0-spa-js and Angular 8

This issue can be reproduced for different frameworks like React as well. In other words, It isn’t specific to Angular. In summary, before a login transaction starts auth0-spa-js library creates a random state variable and stores it in a cookie. Then, it makes a redirect to Auth0 server with this state parameter. After the user is authenticated Auth0 returns a code along with the same state parameter. Auth-spa-js library checks if the state returned matches with the state stored in the cookie a…