When we are adding custom domain in our auth0 variables at client side. It is still asking for user consent on our deployed site.
Interestingly, if we replace that custom domain in our code, with the actual domain of that auth0 application, then it works exactly as expected.
I have not seen this happen for custom domains before, but I can confirm! Do any of the Allowed Callback URLs of the application contain localhost by chance?
…you cannot skip consent (even for first-party applications) if localhost appears in any domain in the application’s Allowed Callback URLs setting (found in Dashboard > Applications > Settings). Make sure to update Allowed Callback URLs and the callback URL you configured in your application to match the updated domain-mapping.