Payload validation error: 'Additional properties not allowed: allow_online_access_with_ephemeral_sessions'

When accessing the following URL and trying to change the custom API settings, an error occurs and I cannot make the changes.

https://manage.auth0.com/dashboard/jp/ [ my-tenant-name ] /apis/ [ api-id ] /settings

Payload validation error: 'Additional properties not allowed: allow_online_access_with_ephemeral_sessions'.

If I click the save button immediately after accessing the URL, no error occurs.

However, if I change any setting (e.g., extending the access token expiration time by 1 second) and click the save button, the above error occurs.

After that, if I revert the access token expiration time to its original value and click the save button, the error still occurs.

Why?

Hello! i’m getting the same error, I can’t enable offline access for api. It seems to be a bug.

thank you for any reply!

Hi @t.fukao, @michele.re

Welcome to the Auth0 Community!

I understand you’re encountering an issue when saving API permissions on the Auth0 Dashboard. I can confirm this is a known issue resulting from our new “Online Refresh Token Allowance in Ephemeral Sessions” feature.

While there is no ETA for a fix at this time, it should be released in the near future. In the meantime, you can use the Management API as a workaround.

Since the error is caused by the Dashboard automatically appending an unsupported property, you can bypass it by Updating a resource server using a PATCH /api/v2/resource-servers/{id} request. As long as you omit the allow_online_access_with_ephemeral_sessions property from your JSON payload and only include your intended changes, the schema validation will pass, and your permissions will be saved.

​​​​​​​I hope this information has been helpful. Please let me know if you have any questions.
Best regards,
Remus

Hello @t.fukao, @michele.re,

Coming back with an update. Our teams have just announced that the issue was resolved. Please let us know if you encounter the issue anymore!

Thank you!
Best regards,
Remus