# \#auth0-spa-js **URL:** https://community.auth0.com/tag/auth0-spa-js/1340.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [How to customize the Unblock Account Page with New Universal Login (beta)](https://community.auth0.com/t/how-to-customize-the-unblock-account-page-with-new-universal-login-beta/42969)
**Author:** [@guilherme.scotti](https://community.auth0.com/u/guilherme.scotti)\ **Replies:** 14\ **Last updated:** [November 21, 2025, 6:17pm UTC](https://community.auth0.com/t/how-to-customize-the-unblock-account-page-with-new-universal-login-beta/42969 "2025-11-21T18:17:27Z")
Hi There. I’m using New Universal Login experience, and my company customized every available Page (Login, Password Reset, MFA…) and also those email templates available (Verification, Welcome, Reset Password…). But whe… --- ## [Installing auth0-angular is generating an error](https://community.auth0.com/t/installing-auth0-angular-is-generating-an-error/191597)
**Author:** [@judith1](https://community.auth0.com/u/judith1)\ **Replies:** 1\ **Last updated:** [September 8, 2025, 6:10pm UTC](https://community.auth0.com/t/installing-auth0-angular-is-generating-an-error/191597 "2025-09-08T18:10:35Z")
I am using auth0-angular version 2.2.3 in my angular application. Locally the application is building correctly. When I build on github where the build is first doing an npm install, the following error is happening when… --- ## [I keep receiving an Auth0 SDK error](https://community.auth0.com/t/i-keep-receiving-an-auth0-sdk-error/188757)
**Author:** [@junoswift13](https://community.auth0.com/u/junoswift13)\ **Replies:** 1\ **Last updated:** [July 9, 2025, 7:12pm UTC](https://community.auth0.com/t/i-keep-receiving-an-auth0-sdk-error/188757 "2025-07-09T19:12:08Z")
Hi Auth0 Community, I’m currently integrating the Auth0 SPA SDK into a local project, but I’m consistently running into an issue where the SDK fails to load. Here’s what’s happening: Issue: The following error appears … --- ## [Using @auth0/auth-vue (auth0-spa-js) 's loginWithRedirect. After successful authentication click browser back btn shows /callback Page](https://community.auth0.com/t/using-auth0-auth-vue-auth0-spa-js-s-loginwithredirect-after-successful-authentication-click-browser-back-btn-shows-callback-page/181554)
**Author:** [@brainocorner649](https://community.auth0.com/u/brainocorner649)\ **Replies:** 5\ **Last updated:** [February 18, 2025, 5:44am UTC](https://community.auth0.com/t/using-auth0-auth-vue-auth0-spa-js-s-loginwithredirect-after-successful-authentication-click-browser-back-btn-shows-callback-page/181554 "2025-02-18T05:44:15Z")
After successful authentication, auth server redirects user to /callback?code=…&state=… route (where I Am displaying a static message “Auth in progress”) then auth-vue or auth0-spa-js sdk navigates user to /profile page … --- ## [getTokenSilently fails on tab lock logic](https://community.auth0.com/t/gettokensilently-fails-on-tab-lock-logic/182025)
**Author:** [@rendez](https://community.auth0.com/u/rendez)\ **Replies:** 5\ **Last updated:** [February 14, 2025, 7:41pm UTC](https://community.auth0.com/t/gettokensilently-fails-on-tab-lock-logic/182025 "2025-02-14T19:41:02Z")
Hi, after implementing rotating tokens yesterday and working the entire day on my dev environment, today a problem started showing up - in several occasions getTokenSilently() fails to acquire a lock. I am not using inc… --- ## [Empty event.request.body on pre user registration action](https://community.auth0.com/t/empty-event-request-body-on-pre-user-registration-action/149513)
**Author:** [@czf](https://community.auth0.com/u/czf)\ **Replies:** 3\ **Last updated:** [October 10, 2024, 7:45pm UTC](https://community.auth0.com/t/empty-event-request-body-on-pre-user-registration-action/149513 "2024-10-10T19:45:27Z")
I’m including some custom parameters in my call to loginWithRedirect. I’m using the sample app. const options = { authorizationParams: { redirect\_uri: window.location.origin, invitation: \,… --- ## [Permissions claim empty](https://community.auth0.com/t/permissions-claim-empty/137414)
**Author:** [@mgazza](https://community.auth0.com/u/mgazza)\ **Replies:** 3\ **Last updated:** [June 25, 2024, 9:37pm UTC](https://community.auth0.com/t/permissions-claim-empty/137414 "2024-06-25T21:37:55Z")
Having followed Vue with Composition API (JavaScript) + Standard Library (Golang) Code Sample: Basic Role-Based Access Control (RBAC) for Hello World Full-Stack App The permissions claim is always empty, so I can’t comp… --- ## [Odd CORS error - Request header x-okta-user-agent-extended is not allowed](https://community.auth0.com/t/odd-cors-error-request-header-x-okta-user-agent-extended-is-not-allowed/121386)
**Author:** [@smldg](https://community.auth0.com/u/smldg)\ **Replies:** 5\ **Last updated:** [June 6, 2024, 5:54pm UTC](https://community.auth0.com/t/odd-cors-error-request-header-x-okta-user-agent-extended-is-not-allowed/121386 "2024-06-06T17:54:49Z")
I’m trying to add a basic redirect login to an existing SPA using the latest okta-auth-js library (7.4.3). I’ve initializing with issuer & clientId from my developer app and I’m calling signInWithRedirect, but instead of… --- ## [Brand new application, using Vue sample app, Error: Unauthorized after login](https://community.auth0.com/t/brand-new-application-using-vue-sample-app-error-unauthorized-after-login/123055)
**Author:** [@adamreisnz](https://community.auth0.com/u/adamreisnz)\ **Replies:** 1\ **Last updated:** [December 14, 2023, 3:38am UTC](https://community.auth0.com/t/brand-new-application-using-vue-sample-app-error-unauthorized-after-login/123055 "2023-12-14T03:38:43Z")
Hello, as per the title, I’ve followed the guide to create a new app, everything is working fine, I can go through the login process and it successfully logs in my user. However, after redirect back to the app, it throw… --- ## [Calling Protected Endpoints using Axios](https://community.auth0.com/t/calling-protected-endpoints-using-axios/119402)
**Author:** [@FreshPineapples](https://community.auth0.com/u/FreshPineapples)\ **Replies:** 2\ **Last updated:** [October 26, 2023, 7:34pm UTC](https://community.auth0.com/t/calling-protected-endpoints-using-axios/119402 "2023-10-26T19:34:55Z")
Hello, I’m a new user of Auth0 and I’m also learning how to build a MERN stack application at the moment. I’m currently using Axios to call the protected backend API, however I keep getting 401 unauthorized when I try to… --- ## [Vue sdk is not working with typescript - createAuth0. Is there a solution?](https://community.auth0.com/t/vue-sdk-is-not-working-with-typescript-createauth0-is-there-a-solution/118216)
**Author:** [@jasonrwhite1983](https://community.auth0.com/u/jasonrwhite1983)\ **Replies:** 1\ **Last updated:** [October 17, 2023, 6:00pm UTC](https://community.auth0.com/t/vue-sdk-is-not-working-with-typescript-createauth0-is-there-a-solution/118216 "2023-10-17T18:00:52Z")
The flow works fine while I am testing in dev but I ran into errors once I tried to npm run build. I am wiring up an Vue admin that was coded using typescript. Any help or a point in the right direction would be appr… --- ## [Auth0 Allowed Logout URLs only working with 1st URL in the list](https://community.auth0.com/t/auth0-allowed-logout-urls-only-working-with-1st-url-in-the-list/113002)
**Author:** [@AbdYashar07](https://community.auth0.com/u/AbdYashar07)\ **Replies:** 1\ **Last updated:** [September 5, 2023, 9:29am UTC](https://community.auth0.com/t/auth0-allowed-logout-urls-only-working-with-1st-url-in-the-list/113002 "2023-09-05T09:29:48Z")
Hi all, Currently I’ve configured a couple of url’s in the Allowed Logout Url’s in a Auth0 application. But when the user is logging out only taking the first URL which is mentioned in the Allowed Logout URLs though I’… --- ## [Auth0 SDK js saml login](https://community.auth0.com/t/auth0-sdk-js-saml-login/114645)
**Author:** [@henry.qin](https://community.auth0.com/u/henry.qin)\ **Replies:** 2\ **Last updated:** [August 29, 2023, 10:51pm UTC](https://community.auth0.com/t/auth0-sdk-js-saml-login/114645 "2023-08-29T22:51:56Z")
Hi, I’m new to auth0. I have a question about auth0 saml login. The target: I want to build a SPA using auth0 as IdP and connect to 2 applications. The first app is an API to consume an auth0 management API. The secon… --- ## [Triggering 2FA (sms, authenticator, etc) when accessing protected route](https://community.auth0.com/t/triggering-2fa-sms-authenticator-etc-when-accessing-protected-route/108724)
**Author:** [@justinec.zeniark](https://community.auth0.com/u/justinec.zeniark)\ **Replies:** 3\ **Last updated:** [June 8, 2023, 3:40am UTC](https://community.auth0.com/t/triggering-2fa-sms-authenticator-etc-when-accessing-protected-route/108724 "2023-06-08T03:40:12Z")
We are planning to migrate our existing platform to auth0 and we are leaning towards universal login more specifically the Authorization Code Flow w/ PKCE. This topic is clear to us but we are unable to determined how we… --- ## [Getting token from datev](https://community.auth0.com/t/getting-token-from-datev/104716)
**Author:** [@tvu](https://community.auth0.com/u/tvu)\ **Replies:** 1\ **Last updated:** [April 20, 2023, 1:10pm UTC](https://community.auth0.com/t/getting-token-from-datev/104716 "2023-04-20T13:10:10Z")
Hello, im trying to use the singple page sdk in javascript for a OAUTH workflow with PKCE. I have a working request using postman. Following URL is called in Postman: https://login.datev.de/openidsandbox/authorize? re… --- ## [Vue Calling an API Quickstart - Error Unauthorised](https://community.auth0.com/t/vue-calling-an-api-quickstart-error-unauthorised/100376)
**Author:** [@t.kirkpatrick](https://community.auth0.com/u/t.kirkpatrick)\ **Replies:** 1\ **Last updated:** [February 13, 2023, 7:15pm UTC](https://community.auth0.com/t/vue-calling-an-api-quickstart-error-unauthorised/100376 "2023-02-13T19:15:26Z")
I’ve been stuck on the following for a couple of days - going around in circles. I’m trying to get the Vue/Auth0 quickstart working, as I need to be able to get custom attributes for a user from the Azure AD Enterprise … --- ## [Login with SPA and obtain info with Php](https://community.auth0.com/t/login-with-spa-and-obtain-info-with-php/99232)
**Author:** [@isimental](https://community.auth0.com/u/isimental)\ **Replies:** 5\ **Last updated:** [February 1, 2023, 2:31pm UTC](https://community.auth0.com/t/login-with-spa-and-obtain-info-with-php/99232 "2023-02-01T14:31:15Z")
I have a Php site and I am using the SPA example with the Universal Login. All works fine. I can login with email and password or with any configured social network When user login, I got a code and state via GET. My qu… --- ## [Understanding RS256 Tokens](https://community.auth0.com/t/understanding-rs256-tokens/91207)
**Author:** [@mhamrah](https://community.auth0.com/u/mhamrah)\ **Replies:** 1\ **Last updated:** [September 23, 2022, 11:55pm UTC](https://community.auth0.com/t/understanding-rs256-tokens/91207 "2022-09-23T23:55:34Z")
I’m using the auth0-spa-js library using RS256 signing, and I’m seeing tokens with five parts (four periods). Snippet below. This seems to go against the three-part JWT structure. I’m curious what the deal is here? Can’t… --- ## [Adding additional fields during sign-up with Auth0.js](https://community.auth0.com/t/adding-additional-fields-during-sign-up-with-auth0-js/86100)
**Author:** [@red\_mystik](https://community.auth0.com/u/red_mystik)\ **Replies:** 1\ **Last updated:** [June 29, 2022, 6:39pm UTC](https://community.auth0.com/t/adding-additional-fields-during-sign-up-with-auth0-js/86100 "2022-06-29T18:39:42Z")
I have a Next.js app that I’m looking to add Auth0 to and add three custom sign-up fields. I quickly found out that the New Universal Login Page was not going to be it. I’m looking for a way to add additional sign-up fi… --- ## [What is the equivilent of \`connectionScope\` in Auth0-SPA-JS?](https://community.auth0.com/t/what-is-the-equivilent-of-connectionscope-in-auth0-spa-js/85741)
**Author:** [@jgleason](https://community.auth0.com/u/jgleason)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 2:57pm UTC](https://community.auth0.com/t/what-is-the-equivilent-of-connectionscope-in-auth0-spa-js/85741 "2022-06-27T14:57:58Z")
Currently I have the following in my spa… createAuth0({ domain: "...", client\_id: "...", redirect\_uri: window.location.origin, prompt: "consent", useRefreshTokens: true, }), A cowo… --- ## [\[Vue 3 & Vite 2\] Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'getTokenSilently')](https://community.auth0.com/t/vue-3-vite-2-uncaught-in-promise-typeerror-cannot-read-properties-of-undefined-reading-gettokensilently/81137)
**Author:** [@dur2dakka](https://community.auth0.com/u/dur2dakka)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 6:59am UTC](https://community.auth0.com/t/vue-3-vite-2-uncaught-in-promise-typeerror-cannot-read-properties-of-undefined-reading-gettokensilently/81137 "2022-05-20T06:59:39Z")
Hi! @auth0/auth0-spa-js: v1.21.0 node: v16.13.0 vue-router: v4.0.14 vue: v3.2.31 vite: v2.9.1 Using getTokenSilently gives error in the title. Use: import { useAuth } from "@/backend/auth/useAuthService"; const {… --- ## [Multifactor authentication with rotating refresh](https://community.auth0.com/t/multifactor-authentication-with-rotating-refresh/46627)
**Author:** [@anthony.konschuh](https://community.auth0.com/u/anthony.konschuh)\ **Replies:** 7\ **Last updated:** [April 21, 2022, 4:58am UTC](https://community.auth0.com/t/multifactor-authentication-with-rotating-refresh/46627 "2022-04-21T04:58:18Z")
I’m trying to implement the rotating refresh token with my single page app using the auth0-spa-js SDK. Everything was working until I enabled MFA for the user I was testing with. Now when it tries to silent auth with the… --- ## [Is auth0-spa-js storing tokens in localStorage vulnerable to XSS?](https://community.auth0.com/t/is-auth0-spa-js-storing-tokens-in-localstorage-vulnerable-to-xss/77145)
**Author:** [@quequierebego](https://community.auth0.com/u/quequierebego)\ **Replies:** 4\ **Last updated:** [January 27, 2022, 8:47pm UTC](https://community.auth0.com/t/is-auth0-spa-js-storing-tokens-in-localstorage-vulnerable-to-xss/77145 "2022-01-27T20:47:54Z")
Hello, I want to use Auth0-spa-js lib and I saw that token are stored in memory. I know that’s better than store them in localstore (that can be exposed to XSS attack) But, if i load a malicious script, can he stole to… --- ## [How to login user with username/password](https://community.auth0.com/t/how-to-login-user-with-username-password/76743)
**Author:** [@qweluke](https://community.auth0.com/u/qweluke)\ **Replies:** 3\ **Last updated:** [January 20, 2022, 9:38pm UTC](https://community.auth0.com/t/how-to-login-user-with-username-password/76743 "2022-01-20T21:38:48Z")
So I’m using two libs in my app: @auth0/auth0-react auth0-js My React.js app is wrapped around the Auth0Provider component, like so: import React from 'react'; import { useHistory } from 'react-router-dom'; import { … --- ## [Protecting Static Website using Auth0 but using existing users](https://community.auth0.com/t/protecting-static-website-using-auth0-but-using-existing-users/76359)
**Author:** [@dheerajdhall2709](https://community.auth0.com/u/dheerajdhall2709)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 5:03pm UTC](https://community.auth0.com/t/protecting-static-website-using-auth0-but-using-existing-users/76359 "2022-01-13T17:03:22Z")
Hello. I am trying to protect a static website by using auth0 and I am utilizing the auth0-spa-js to do this, this one to be exact - Auth0 JavaScript SDK Quickstarts: Login I was able to get the login page to show up bu… --- ## [Question: auth0-spa.js, auth0.loginWithPopup() on safari mobile](https://community.auth0.com/t/question-auth0-spa-js-auth0-loginwithpopup-on-safari-mobile/74555)
**Author:** [@ptjm8422](https://community.auth0.com/u/ptjm8422)\ **Replies:** 1\ **Last updated:** [December 9, 2021, 10:39pm UTC](https://community.auth0.com/t/question-auth0-spa-js-auth0-loginwithpopup-on-safari-mobile/74555 "2021-12-09T22:39:39Z")
Please include the following information in your post: Which SDK this is regarding: e.g. auth0-node auth0-spa-js SDK Version: e.g. 2.29.0 1.19.3 (latest) Platform Version: e.g. Node 12.19.0 Node v17.0.1 I ha… --- ## [Does auth0-spa-js support variable size access tokens?](https://community.auth0.com/t/does-auth0-spa-js-support-variable-size-access-tokens/72749)
**Author:** [@balazs.bokanyi](https://community.auth0.com/u/balazs.bokanyi)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 11:23pm UTC](https://community.auth0.com/t/does-auth0-spa-js-support-variable-size-access-tokens/72749 "2021-11-08T23:23:47Z")
Hello everyone, with the recent announcement of migrating to variable size access tokens and authorization codes, I’m trying to figure out if the libraries we use support this feature. One such library is Auth0-SPA-JS.… --- ## [Auth0 callback URL with Capacitor native app?](https://community.auth0.com/t/auth0-callback-url-with-capacitor-native-app/66293)
**Author:** [@SpinUp](https://community.auth0.com/u/SpinUp)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 11:28am UTC](https://community.auth0.com/t/auth0-callback-url-with-capacitor-native-app/66293 "2021-10-20T11:28:41Z")
Hi there, I hope someone can help. I’m struggling to find any information about what the callback URL would be for a native app deployed using Capacitor. I’ve seen some discussion about Ionic using ionic://, but we’re … --- ## [Intermittent Invalid State](https://community.auth0.com/t/intermittent-invalid-state/69452)
**Author:** [@elamison](https://community.auth0.com/u/elamison)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 5:30pm UTC](https://community.auth0.com/t/intermittent-invalid-state/69452 "2021-09-14T17:30:48Z")
auth0-spa-js 1.81 React We’re using the auth0-spa-js module and for some (3) users after they login they get an Invalid State error. If they then go to the protected page they are authenticated and it works. The speci… --- ## [Why is authentication lost after refreshing my single page application in Chrome?](https://community.auth0.com/t/why-is-authentication-lost-after-refreshing-my-single-page-application-in-chrome/68713)
**Author:** [@rstardev](https://community.auth0.com/u/rstardev)\ **Replies:** 5\ **Last updated:** [September 3, 2021, 10:50pm UTC](https://community.auth0.com/t/why-is-authentication-lost-after-refreshing-my-single-page-application-in-chrome/68713 "2021-09-03T22:50:06Z")
I have problems with silent reauthentication in the “latest” Chrome 92. I’ve read and understand the well described topic in Why is authentication lost after refreshing my single page application? but currently there a… [Next page](https://community.auth0.com/tag/auth0-spa-js/1340.md?match_all_tags=true&page=1&tags%5B%5D=auth0-spa-js)