I am using WebAuth to authenticate a VueJS app following the quickstart example provided by Auth0. It works fine when run locally, but once I deploy it I get the following error only when I try to login for the first time: {error: "invalid_token", errorDescription: "Nonce does not match."}. Now, if I login again with the same credentials I won’t see the error again. I was wondering if this is a bug or I do something wrong.
I just figured out what was wrong with the deployed version. It was not an Auth0 bug, rather it was a web server config issue - in my case nginx. I had both http://exmple.com and http://www.example.com as my website’s URLs. Once I configured my web server in a way that it redirects everything to https://example.com the issue was gone.