When a user is blocked, they receive an email where they can click a link to unblock their account. When clicking the link (for the first time), they are taken to an error page “Authentication Error. This URL can be used only once”. Their account is however unblocked successfully.
Is this a bug on Auth0’s side? Or is there something we can do about it?
This is also an issue for us - some company’s email systems do security checks when url’s are included by a sender and will actually visit that url for an additional security check. Since this url is only good for one visit this is invalidating it and when the actual user clicks on that link they get this error, even though to them they had never clicked it yet. Any way to resolve this?
Hi there. I was passed on this community question and can see there is not answer for it. So let me remedy this.
What @larry.laski has said is correct. There are a few email systems that perform security checks against URL’s before the end user can actually access them, causing this issue.
This should not be an issue on newly created tenants but if you experience this then please open a support ticket with us to get the relevant tenant flag enabled.
