handleRedirectCallback failing with "Invalid State" error & empty response

[nik.baleca]

Hi everyone and @SreekarMouli98!

I am sorry about the delayed response to your inquiry!

As @TheMuffinMan has mentioned, this indeed appears to be an issue with the transactionManager which might be deleting the state cookie before the token exchange is completed, resulting in an Invalid State error.

I would highly recommend to review this community post regarding the matter where the solution is explained in high details:

Invalid state on reload Auth0 callback url, using auth0-spa-js and Angular 8

This issue can be reproduced for different frameworks like React as well. In other words, It isn’t specific to Angular. In summary, before a login transaction starts auth0-spa-js library creates a random state variable and stores it in a cookie. Then, it makes a redirect to Auth0 server with this state parameter. After the user is authenticated Auth0 returns a code along with the same state parameter. Auth-spa-js library checks if the state returned matches with the state stored in the cookie a…

If there are any other questions, feel free to leave a reply!

Kind Regards,
Nik