Stop closing issues just days after your long-overdue response!

[ajv]

Thanks, I’d be interested in these 2 topics for MFAs:

Token renewal on SPA + MFA

Hi There, we have a (js) SPA using Auth0 (database provider) and MFA enabled. When the current session expires (which is 2h for now), we use the ‘checkSession()’ method to renew the token. The issue is that we get an error “MFA authentication required” and thus, the session cannot be renewed and the user is logged out. Is this an expected behavior ? As the access token validity should be short-lived, the user experience is quite bad; and refresh tokens are not usable as this is a SPA. The …

Unable to renew token when MFA is enabled

I am using the webAuth.checkSession method to silently renew the token. It all worked well but when I enabled MFA. the renew failed with the following error {error: "login_required", error_description: "Multifactor authentication required"} Is there a way to keep the renew feature working with MFA is enabled? My case is : User enter username/password and perform MFA Guardian User logged in successfully and the checkSession to renew token will succeed. After user logged out they need t…

And these:

Unable to create user with verified email [ POST - /api/v2/users ]

I’m trying to create new user with management API, but I have some troubles. It create my user, but user’s email is not verified even if I set email_verified : true & verify_email : false in request body. Why email_verified field is overwritten to false ? Request body: { user_id: 1, client_id: 'my-client-id', connection: 'Username-Password-Authentication', email: my@mail.com', password: 'mypass', **email_verified: true**, **verify_email: false** } Server response: { _id: …

Auto Login - After Password Reset OR Email Verification

Yea, I still haven’t figured a good solution here. Only a matter of time until our product and UX team bubble it back up again. We’re actually using universal login now as well but still doesn’t seem like there’s a good solution.