Hi,
We just upgraded to the latest version of the plugin and now cannot log in.
There was a problem with your log in: Invalid ID token [error code: invalid_id_token]
error is being thrown in WP_auth0_loginManager.php but there don’t seem to be any useful error traces to track down why:
} catch ( WP_Auth0_InvalidIdTokenException $e ) {
$code = 'invalid_id_token';
$display_message = __('Invalid ID token', 'wp-auth0' );
WP_Auth0_ErrorLog::insert_error(
__METHOD__ . ' L:' . __LINE__,
new WP_Error( $code, $display_message . ': ' . $e->getMessage() )
);
500 error is thrown but nothing in PHP, Apache or wordpress logs.
Full error object output:
WP_Auth0_InvalidIdTokenException Object
(
[message:protected] => Issuer (iss) claim must be a string present in the ID token
[string:Exception:private] =>
[code:protected] => 0
[file:protected] => /var/www/html/wp-content/plugins/auth0/lib/token-verifier/WP_Auth0_IdTokenVerifier.php
[line:protected] => 100
[trace:Exception:private] => Array
(
[0] => Array
(
[file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
[line] => 596
[function] => verify
[class] => WP_Auth0_IdTokenVerifier
[type] => ->
)
[1] => Array
(
[file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
[line] => 188
[function] => decode_id_token
[class] => WP_Auth0_LoginManager
[type] => ->
)
[2] => Array
(
[file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
[line] => 139
[function] => redirect_login
[class] => WP_Auth0_LoginManager
[type] => ->
)
[3] => Array
(
[file] => /var/www/html/wp-content/plugins/auth0/WP_Auth0.php
[line] => 635
[function] => init_auth0
[class] => WP_Auth0_LoginManager
[type] => ->
)
[4] => Array
(
[file] => /var/www/html/wp-includes/class-wp-hook.php
[line] => 292
[function] => wp_auth0_process_auth_callback
)
[5] => Array
(
[file] => /var/www/html/wp-includes/class-wp-hook.php
[line] => 316
[function] => apply_filters
[class] => WP_Hook
[type] => ->
)
[6] => Array
(
[file] => /var/www/html/wp-includes/plugin.php
[line] => 484
[function] => do_action
[class] => WP_Hook
[type] => ->
)
[7] => Array
(
[file] => /var/www/html/wp-includes/template-loader.php
[line] => 13
[function] => do_action
)
[8] => Array
(
[file] => /var/www/html/wp-blog-header.php
[line] => 19
[args] => Array
(
[0] => /var/www/html/wp-includes/template-loader.php
)
[function] => require_once
)
[9] => Array
(
[file] => /var/www/html/index.php
[line] => 17
[args] => Array
(
[0] => /var/www/html/wp-blog-header.php
)
[function] => require
)
)
[previous:Exception:private] =>
)
We’ve seen one other issue like this: Auth0 4.0 breaks login – Invalid ID token | WordPress.org but just copied the secret in and it was working before yesterday
Any pointers to resolve?
Thanks
Rob