“Wrong email or verification code” on Magic Link click

We have a user (actually a handful of users) who try to login using passwordless login with Firefox 99.0.0 / Mac OS X 10.15.0

However, they can’t login and they get this error message “unauthorized (wrong email or verification code.)”

They are accessing the link within 17 seconds, so it’s not an expired link. They also use Firefox to get the code/link and attempt to login.

Reproduction steps:

As far as we know…

  1. The user requested a link using Firefox passwordless login
  2. 17 seconds later they clicked the login link and open it with Firefox (we don’t know how they clicked the link yet)
  3. The Auth0 login shows an error “unauthorized (wrong email or verification code)”

Screenshots of logs in Auth0

Screen Shot 2022-03-31 at 2.35.27 PM
Screen Shot 2022-03-31 at 2.35.47 PM

We saw this related issue but it has been closed for a long time and doesn’t seem identical to our issue:


We are seeing the same error, but I would like to add that we are able to appropriately authenticate with the link from the email if we paste it in the same browser tab as the link was requested from.

If we paste it in any other window or just click the link in the email we see the same behavior as @watadarkstar