Getting access_denied → missing_host after switching to new custom domain for Google/Apple login

Get Help
,
1

Hi everyone,

I’m in the process of migrating to a new Auth0 custom domain.

Previously, with the deactivated domain, I was seeing a “wrong redirect uri” error. I updated the redirect URI in both Google and Apple developer consoles to match the new custom domain:

https://new-custom-domain-name/login/callback

Now, instead of the wrong redirect URI message, I’m getting this error during Google login:

{
  "error": "access_denied",
  "error_description": "missing_host"
}

And here’s the corresponding Auth0 log entry:

{
  "date": "2025-10-15T18:55:05.008Z",
  "type": "f",
  "description": "missing_host",
  "connection": "google-oauth2",
  "connection_id": "",
  "client_id": "my-client-id",
  "client_name": "my-client-name",
  "ip": "159.48.52.103",
  "user_agent": "Chrome 141.0.0 / Mac OS X 10.15.7",
  "details": {
    "body": {},
    "qs": {
      "state": "****************************"
    },
    "connection": "google-oauth2",
    "error": {
      "message": "missing_host",
      "oauthError": "access_denied",
      "type": "oauth-authorization"
    },
    "session_id": "id",
    "actions": {
      "executions": [
        ""
      ]
    },
    "stats": {
      "loginsCount": 9
    }
  },
  "hostname": "new-custom-domain-name",
  "user_id": "google-oauth2|userID",
  "user_name": "USER@gmail.com",
  "strategy": "google-oauth2",
  "strategy_type": "social",
  "audience": "Audience",
  "scope": [
    "openid",
    "profile",
    "email",
    "offline_access",
    "read:current_user",
    "update:current_user_metadata"
  ],
  "$event_schema": {
    "version": "1.0.0"
  },
  "environment_name": "prod-us-4",
  "log_id": "id",
  "tenant_name": "dev-tenant",
  "_id": "id",
  "isMobile": false,
  "location_info": {},
  "id": "id"
}

Everything else (client_id, audience, scopes, DNS, etc.) seems correctly configured, and the domain resolves fine. This only started happening right after updating to the new custom domain and updating redirect URIs in the Google/Apple console.

Has anyone encountered the missing_host error after switching a social connection to a new custom domain? Is there an additional step required on Auth0 or social provider side after changing the domain?

Any guidance or hints on what I might have overlooked would be appreciated!

3

Hi @gedeon.u

Could you please let me know if you are using any kind of reverse proxy for your custom domain?

Also, is the Origin Domain Name assigned to your custom domain the one used for the host header?

Kind Regards,
Nik

4

Since I haven’t heard from you for a while @gedeon.u , I will be marking the above reply as the solution to the thread.

If you will still need assistance on this matter, please send me a DM to reopen to the topic if it gets closed or just reference this one in your new one!

Kind Regards,
Nik