Hi dear community:
When I use auth0/auth0-spa-js library for browser sign up and login flow. I found the following:
Right after user signup, it is redirecting to my home page and correctly asking user to login without going to the username/pwd screen. On a few browsers, the login failed and if user click login again, it does not show username/pwd entering screen at all, instead it just silently attempts to login in again which keeps failing. Basically, the new users are not able to login on a few browsers.
It works well on the following browsers as far as i see: 1. chrome (Mac) 2. firefox (Mac)
It doesn’t work on 1. Safari (Mac) 2. Chrome (Iphone) 3. Safari(Iphone)
I noticed from a few posts that there are few work-around:
- disable browser prevent cross-site tracking (for Mac Safari) → it worked for me, but only solved one platform issue.
- set rotate token = true, and use the following code to create auth0client:
createAuth0Client({
domain: xxx
client_id: xxx
audience: xxx
redirect_uri: xxx
useRefreshTokens: true
})
according to this: Auth0 Single Page App SDK
→ however it didn’t work for me either. Please see the error listed above from mobile chrome workflow.
Question:
- is there a way to force show login screen again so that login is not relying on cookie session info.
- is there any configuration issue which caused the error even when I set rotate token=true?
Appreciate your help.
XJ
{
“date”: “2021-01-25T15:04:14.757Z”,
“type”: “fsa”,
“description”: “Login required”,
“client_id”: “”,
“client_name”: “”,
“ip”: “217.169.19.14”,
“user_agent”: “Chrome Mobile iOS 87.0.4280 / iOS 14.3.0”,
“details”: {
“body”: {},
“qs”: {
“client_id”: “”,
“audience”: “”,
“redirect_uri”: “”,
“scope”: “openid profile email offline_access”,
“response_type”: “code”,
“response_mode”: “web_message”,
“state”: “xxx”,
“nonce”: “xxx”,
“code_challenge”: “xxx”,
“code_challenge_method”: “S256”,
“prompt”: “none”,
“auth0Client”: “xxx”
},
“connection”: null,
“error”: {
“message”: “Login required”,
“oauthError”: “login_required”,
“type”: “oauth-authorization”
},
“riskAssessment”: null
},
“hostname”: “”,
“audience”: “”,
“scope”: [
“openid”,
“profile”,
“email”,
“offline_access”
],
“auth0_client”: {
“name”: “auth0-spa-js”,
“version”: “1.12.0”
},
“log_id”: “90020210125150420610005775599721818011453075753948676130”,
“_id”: “90020210125150420610005775599721818011453075753948676130”,
“isMobile”: true
}