Can you let me know if you’ve made any changes to the code before this happened or it just immediately stopped working for Safari?
This kind of error: “Unknown or invalid login ticket” is most likely due to blocking of 3rd party cookies in the browser. I would suggest looking into implementing the Cross-Origin Verification Page
as this has resolved the issue in some cases. Other solutions would include moving to Universal Login
or implementing custom domains
this way the cookies are no longer third-party and are not blocked by browsers.
I can confirm it just immediately stopped working without any code changes.
We use auth0 lock on our webpage you can see here. https://reports.hellosoda-test.com. We have multiple websites that use auth0 lock. we have both a test and production tenants.
So i just looked at Cross-origin Authentication page you linked to thank you. In that documentation there are 2 solutions “Custom Domain” and “Cross-origin verification page”. You are recommending the “Cross-origin verification page” solution, can i ask why? Are there benefits and drawbacks to each you could kindly and briefly list?
Im looking for the easiest solution to get up and running again on safari.
I do not suggest using specifically any of those (Cross-Origin Authentication, Universal Login, Custom Domains) I mean all of them should solve your issue and require approximately the same effort, but basically you need to keep a few things in mind:
Collecting user credentials in an application served from one origin and then sending them to another origin can present certain security vulnerabilities and cross-origin authentication flow which makes use of third-party cookies
Because cross-origin authentication is achieved using third-party cookies, disabling third-party cookies will make cross-origin authentication fail.
In terms of custom domains you must register and own the domain name to which you are mapping your
Auth0 domain
It is recommended that you use custom domains with Universal Login for the most seamless and secure experience for your end users
I know it seems like a lot of new stuff but that’s the case/issue that our users happen to come across from time to time and it’s because of 3rd party stack. If you want to see their cases here are some of them: