Hmm, bizarre. An Invalid State can only be thrown if those two values don’t match, so something is off somewhere.
- Could you share how you’re initializing the Auth0 class? Minus any sensitive data, of course.
- Could you elaborate on the specific SDK and PHP versions you are using in your environment and confirm that you have the OpenSSL extension enabled for PHP?