# Redirect to back Auth0 react app from third party shows user as unauthenticated

**URL:** <https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759>\
**Category:** Get Help\
**Tags:** authentication-sessions, sessions\
**Created:** [March 28, 2024, 9:55pm UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759 "2024-03-28T21:55:57Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![lritter1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lritter1/32/48843_2.png) [@lritter1](https://community.auth0.com/u/lritter1)\
**Post date:** [March 28, 2024, 9:55pm UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759/1 "2024-03-28T21:55:57Z")

</div>

Here’s the scenario. For context we have a react app that we use the Auth0 sdk in for authentication. Everything works correctly there and we use the useAuth0 hook to get the user and authentication state

1. The user use authenticates via the universal login and redirects to the dashboard
2. The user clicks a link that goes to the OAuth2 page for Slack integration `(https://slack.com/oauth/v2/authorize)`. In the query string we pass scope, a redirect URI to callback page in the app that’s behind authentication, our client id, and the user id as `state`, so the whole url looks like this: `${slackOauthUrl}?scope=${scopeList}&client_id=${ClientId}&redirect_uri=${redirectUri}&state=${userId}`
3. The user is redirect to their slack workspace in the browser at the url `https://${workspace name}.slack.com/oauth?` with the query string from the link in the previous step passed in.
4. The user clicks the “allow button” on the slack integration form and gets redirected to the redirect url passed in the query string.
5. What should happens next is after the redirect the user should be already authenticated and the page under the callback url route should render and fire the callback to our server, but instead the useAuth0 hook returns `false` for `isAuthenticated` and the user gets redirected back to a non-protected route. However, the user is still authenticated because i can type in the url of a protected route and access it without reauthenticating. What is the fix here? Thanks

---

<div class="post-metadata">

**Author:** ![sahil485](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sahil485/32/68897_2.png) [@sahil485](https://community.auth0.com/u/sahil485)\
**Post date:** [December 24, 2024, 9:02pm UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759/2 "2024-12-24T21:02:10Z")

</div>

Having this same error, did you end up resolving it?

---

<div class="post-metadata">

**Author:** ![henry1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/henry1/32/60877_2.png) [@henry1](https://community.auth0.com/u/henry1)\
**Post date:** [April 29, 2025, 7:54am UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759/3 "2025-04-29T07:54:58Z")

</div>

Same issue. It worked in my boss’s Chrome browser but not my browser.  
I think it has something to do with Chrome phasing-out Third Party Cookies.

Current situation:

- Local env:
  - it works differently for different machines:
    - **My main machine requires re-login every time I refresh the browser. This is causing a lot of pain in development**
    - Another machine doesn’t have this issue, but it’s much slower.

- Staging:
  - SSO doesn’t work in some browsers - i.e. users are logged in on `a.platform.com` but when they click to `b.platform.com`, `getAccessTokenSilently` failed with `login_required`
  - I think I can just set a custom domain to bypass the 3rd-party cookie but I haven’t been able to verify it yet

> **Frontend implementation details:**
>
> I’m using react-router for navigation, more specifically:
> 
> ```tsx
> <RouterProvider router={router} />
> 
> ```
> 
> so for the `onRedirectCallback` to redirect, I need to put my Auth0Provider in every route:
> 
> ```tsx
> import { AppState, Auth0Provider, AuthorizationParams } from '@auth0/auth0-react';
> import { Container, Title } from '@mantine/core';
> import { ReactNode, useCallback, useMemo } from 'react';
> import { useTranslation } from 'react-i18next';
> import { useNavigate } from 'react-router-dom';
> 
> const domain = import.meta.env.VITE_AUTH0_DOMAIN;
> const clientId = import.meta.env.VITE_AUTH0_CLIENT_ID;
> 
> export default ({ children }: { children: ReactNode }) => {
> const { i18n } = useTranslation(['common']);
> const navigate = useNavigate();
> 
> const authorizationParams = useMemo(() => {
> return {
> audience: import.meta.env.VITE_AUTH0_AUDIENCE,
> redirect_uri: import.meta.env.VITE_AUTH0_CALLBACK_URL,
> ui_locales: i18n.language,
> } satisfies AuthorizationParams;
> }, [i18n.language, document.cookie]);
> 
> const onRedirectCallback = useCallback(
> (appState?: AppState) => {
> console.log(appState);
> navigate(appState?.returnTo || window.location.pathname);
> },
> [navigate]
> );
> 
> if (!(domain && clientId && authorizationParams.redirect_uri && authorizationParams.audience)) {
> return (
> <Container sx={{ paddingBlock: 2, flex: 1, overflow: 'auto' }}>
> <Title order={2} color="red.6">
> Please fill in all variables
> </Title>
> </Container>
> );
> }
> 
> // doesn't update Auth0 language upon ui language change, likely issue with Auth0Provider
> 
> return (
> <Auth0Provider
> domain={domain}
> clientId={clientId}
> authorizationParams={authorizationParams}
> onRedirectCallback={onRedirectCallback}
> >
> {children}
> </Auth0Provider>
> );
> };
> 
> ```
> 
> Code for getting the user:
> 
> ```tsx
> 
> const { isLoading, getAccessTokenSilently, loginWithRedirect, user: auth0User, error } = useAuth0();
> 
> useEffect(() => {
> getAccessTokenSilently()
> .then((token) => {
> setToken(token);
> if (!token) setIsLoadingUser(false);
> })
> .catch((e) => {
> if (!!e && typeof e === 'object' && 'error' in e && e.error) {
> console.log(e.error);
> if (e.error === 'login_required' || e.error === 'consent_required') {
> loginWithRedirect({
> appState: {
> returnTo: '/',
> },
> authorizationParams: {
> prompt: 'login',
> },
> });
> }
> }
> setIsLoadingUser(false);
> });
> }, [setToken, setIsLoadingUser]);
> 
> ```
> 
> Using `none` for reauthentication prompt just keeps juggling the user between auth0 and localhost.

---

<div class="post-metadata">

**Author:** ![henry1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/henry1/32/60877_2.png) [@henry1](https://community.auth0.com/u/henry1)\
**Post date:** [May 26, 2025, 1:38am UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759/4 "2025-05-26T01:38:13Z")

</div>

Solved: probably it’s due to browser extension and incognito blocking third-party cookie 😆

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [June 9, 2025, 1:38am UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759/5 "2025-06-09T01:38:16Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.