# Vercel logout on any refresh

**URL:** <https://community.auth0.com/t/vercel-logout-on-any-refresh/147590>\
**Category:** Get Help\
**Tags:** sessions, logout\
**Created:** [September 19, 2024, 10:21pm UTC](https://community.auth0.com/t/vercel-logout-on-any-refresh/147590 "2024-09-19T22:21:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![theStacks](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/thestacks/32/60652_2.png) [@theStacks](https://community.auth0.com/u/theStacks)\
**Post date:** [September 19, 2024, 10:21pm UTC](https://community.auth0.com/t/vercel-logout-on-any-refresh/147590/1 "2024-09-19T22:21:23Z")

</div>

Whenever you refresh my vercel project, it logs the user out. I noticed this started happening every time after it was working previously. All my URLs are https://\*.vercel.app and I tested getting a proper client ID from Google but this happens with username/password users as well. Here’s my error in the front end;

 ![Screen Shot 2024-09-19 at 5.12.40 PM](https://global.discourse-cdn.com/auth0/original/3X/6/0/60add71aaa735e5574410841325cb82da6a1e59b.png)

Appreciate any direction folks can provide, I have tried lots of things but can’t seem to make any sense of this

---

<div class="post-metadata">

**Author:** ![nik.baleca](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nik.baleca/32/68749_2.png) [@nik.baleca](https://community.auth0.com/u/nik.baleca)\
**Post date:** [March 21, 2025, 9:21pm UTC](https://community.auth0.com/t/vercel-logout-on-any-refresh/147590/3 "2025-03-21T21:21:40Z")

</div>

Hi @theStacks

Welcome to the Auth0 Community!

I am sorry about the late reply to your inquiry!

It appears that you are making an **`XMLHttpRequest`** or **`Fetch`** to a different domain than your page is on whenever the page is refreshed. Due to the nature of **CORS** , for every request made to a domain, an **HTTP** cookie is attached to it, thus blocking the request that you are trying to makes.Also, any calls made to the **`/authorize`** endpoint should be made via front-channel **HTTP** requests. They should only be made via a redirect or other top-level browser navigation and this is why **CORS** is not supported.

If you have any other questions, feel free to leave a reply or post again on the community!

Kind Regards,  
Nik

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 4, 2025, 9:22pm UTC](https://community.auth0.com/t/vercel-logout-on-any-refresh/147590/4 "2025-04-04T21:22:34Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.