We had a strange issue for a 90 minute period when users tried to authenticate via a SPA they hit a page with the warning “Your browser is a bit unusual… Try disabling ad blockers and other extensions, enabling javascript, or using a different web browser.” The users never could get redirected post login to the SPA.
- The issue affected multiple users but not all users during this time
- No code was pushed within 48 hours prior, no settings were changed for weeks prior
- The users were authenticating against an Azure AD enterprise connection.
- All users were using Chrome 101. The effected users tried to use other browsers and claimed to get the same result.
- The affected users claimed not to have adblockers. They also claimed to have not changed any settings about the browsers in use.
- The problem went away after 90 minutes, but nothing we changed to remedy the issue. They might have cleared their cache but they aren’t savvy enough to confirm that really happened.
I can’t find any mention of this error anywhere. I’m not sure what action I can take to make sure it doesn’t happen again.
Hi @oz6269
Was there an error message in the tenant logs?
John
There was a streak of messages of type: “Failed Silent Auths” with description “Login Required” but nothing else of interest was really in the raw data.
Example with some information redacted
{
"date": "2022-05-24T16:40:01.705Z",
"type": "fsa",
"description": "Login required",
"client_id": "",
"client_name": "XXX",
"ip": "",
"user_agent": "Chrome 101.0.4951 / Windows 10.0.0",
"details": {
"body": {},
"qs": {
"client_id": "",
"redirect_uri": "https://xxx",
"scope": "openid profile email",
"audience": "https://xxx",
"responseType": "token id_token",
"prompt": "none",
"response_type": "code",
"response_mode": "web_message",
"state": "",
"nonce": "",
"code_challenge": "",
"code_challenge_method": "S256",
"auth0Client": ""
},
"connection": null,
"error": {
"message": "Login required",
"oauthError": "login_required",
"type": "oauth-authorization"
},
"riskAssessment": null
},
"hostname": "xxx.com",
"audience": "https://xxx",
"scope": [
"openid",
"profile",
"email"
],
"auth0_client": {
"name": "auth0-spa-js",
"version": "1.21.1"
},
"log_id": "",
"_id": "",
"isMobile": false
}