# Max\_age with auth0lock v11.3

**URL:** <https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293>\
**Category:** Get Help\
**Tags:** classic-universal-login-experience, login-experience\
**Created:** [July 27, 2023, 7:07pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293 "2023-07-27T19:07:26Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nikhil.batta](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nikhil.batta/32/13374_2.png) [@nikhil.batta](https://community.auth0.com/u/nikhil.batta)\
**Post date:** [July 27, 2023, 7:07pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293/1 "2023-07-27T19:07:26Z")

</div>

I am trying to use the max\_age property to force reauthentication of the user. I’m unable to get it to work with auth0Lock v11.3 for Javascript. I’m passing max\_age to my lock through the options. I see that the max\_age value is getting sent to the authorize endpoint. But it is not working. I have also added the “auth\_time” claim value to the id token like this documentation states  
[Force Reauthentication in OIDC](https://auth0.com/docs/authenticate/login/max-age-reauthentication#max_age-authentication-request-parameter).

is this supposed to work with the classic login?

Side note: In the documenation (alot of your documentation) there are many links that are not even available anymore.

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [July 27, 2023, 9:36pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293/3 "2023-07-27T21:36:54Z")

</div>

Hi @nikhil.batta,

Yes, it works with the Classic Universal Login Experience on Auth0 Lock v11.3, as well as, the current v12.1.0.

You will need to make a login request something like the following:

```auto
https://{yourDomain}/authorize?
    response_type=code&
    client_id={yourClientId}&
    redirect_uri={https://yourApp/callback}&
    scope={scope}&
    audience={apiAudience}&
    state={state}&
    max_age=0

```

Please let us know if you have any additional questions.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![nikhil.batta](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nikhil.batta/32/13374_2.png) [@nikhil.batta](https://community.auth0.com/u/nikhil.batta)\
**Post date:** [July 27, 2023, 9:59pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293/4 "2023-07-27T21:59:16Z")

</div>

I am using the auth0 lock configuration options to pass the max\_age value.

I create the auth0lock options like this  
 ![image](https://global.discourse-cdn.com/auth0/original/3X/1/7/17a8bedac8afa5cdce7c866d1647d734a43cca34.png)

and then pass them to the lock like this

 ![image](https://global.discourse-cdn.com/auth0/original/3X/3/c/3cd6b9794f1b32c128eb726286917b44ddc8e270.png)

I have verified through the “network” tab that the max\_age is being passed as a parameter to the authorize call. I am still having no success in being forced to reauthenticated after 30 seconds.

Maybe I’m doing something wrong?

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [July 31, 2023, 7:28pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293/5 "2023-07-31T19:28:26Z")

</div>

Hi @nikhil.batta,

Thanks for the update.

Could you please [capture your login events in a HAR file](https://auth0.com/docs/troubleshoot/har) and send them to me as a direct message to investigate further?

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 14, 2023, 7:28pm UTC](https://community.auth0.com/t/max-age-with-auth0lock-v11-3/112293/6 "2023-08-14T19:28:45Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.