We have a user (actually a handful of users) who try to login using passwordless login with Firefox 99.0.0 / Mac OS X 10.15.0
However, they can’t login and they get this error message “unauthorized (wrong email or verification code.)”
They are accessing the link within 17 seconds, so it’s not an expired link. They also use Firefox to get the code/link and attempt to login.
Reproduction steps:
As far as we know…
The user requested a link using Firefox passwordless login
17 seconds later they clicked the login link and open it with Firefox (we don’t know how they clicked the link yet)
The Auth0 login shows an error “unauthorized (wrong email or verification code)”
Screenshots of logs in Auth0
We saw this related issue but it has been closed for a long time and doesn’t seem identical to our issue:
Ok, I think I’ve managed to find the problematic scenarios. Everything works fine if you use the standard iOS Email app and Safari browser (if it is your default browser). Everything also works fine if you use a GMail app and Chrome browser. However, if you try to use GMail and Safari then that combination doesn’t work if you just click on the link because the GMail app will try to open the link in a Safari browser window within the GMail app which runs in a different context (it will not have t…
2 Likes
acook
April 5, 2022, 9:22pm
4
We are seeing the same error, but I would like to add that we are able to appropriately authenticate with the link from the email if we paste it in the same browser tab as the link was requested from.
If we paste it in any other window or just click the link in the email we see the same behavior as @watadarkstar
