# Re authentication auth\_time does't exist

**URL:** <https://community.auth0.com/t/re-authentication-auth-time-doest-exist/65601>\
**Category:** Get Help\
**Tags:** login\
**Created:** [July 5, 2021, 1:29pm UTC](https://community.auth0.com/t/re-authentication-auth-time-doest-exist/65601 "2021-07-05T13:29:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![aly.sabry](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/aly.sabry/32/13140_2.png) [@aly.sabry](https://community.auth0.com/u/aly.sabry)\
**Post date:** [July 5, 2021, 1:29pm UTC](https://community.auth0.com/t/re-authentication-auth-time-doest-exist/65601/1 "2021-07-05T13:29:28Z")

</div>

Hi auth0,

I am using [GitHub - auth0/auth0-spa-js: Auth0 authentication for Single Page Applications (SPA) with PKCE](https://github.com/auth0/auth0-spa-js) loginWithRedirect function and passing in a max\_age:0 parameter to re-Authenticate a user as mentioned here [https://auth0.com/docs/login/max-age-reauthentication#limitations-of-prompt-login-parameters](https://auth0.com/docs/login/max-age-reauthentication#limitations-of-prompt-login-parameters)

problem: The id Token i get back using getIdTokenClaims() doesn’t include an auth\_time field that shows the last authentication. I have also tries including prompt=“login”

Thanks

---

<div class="post-metadata">

**Author:** ![thameera](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/thameera/32/13430_2.png) [@thameera](https://community.auth0.com/u/thameera)\
**Post date:** [July 9, 2021, 6:52am UTC](https://community.auth0.com/t/re-authentication-auth-time-doest-exist/65601/2 "2021-07-09T06:52:38Z")

</div>

Hey @aly.sabry , I just checked this with the latest spa-js SDK and `getIdTokenClaims()` returned `auth_time`, so I’m guessing there’s something going wrong in your setup.

Some things to check:

1. Open the Network tab in browser’s dev tools before starting the authentication. Now try to login and you will see an `/authorize` request in the list. Click on that and verify that `max_age=0` is being passed as a query parameter there.
2. Get the raw ID token and paste it in [https://jwt.io](https://jwt.io). Check if the parameter is present in the body.

Here’s the code I used btw:

```javascript
await auth0.loginWithRedirect({ max_age: 0 })

```

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [July 24, 2021, 6:52am UTC](https://community.auth0.com/t/re-authentication-auth-time-doest-exist/65601/3 "2021-07-24T06:52:54Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
