# \#auth0js **URL:** https://community.auth0.com/tag/auth0js/147.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [How to implement MFA step-up when using Auth0.js SDK for authentication](https://community.auth0.com/t/how-to-implement-mfa-step-up-when-using-auth0-js-sdk-for-authentication/27722)
**Author:** [@daanporon](https://community.auth0.com/u/daanporon)\ **Replies:** 8\ **Last updated:** [October 23, 2025, 5:22am UTC](https://community.auth0.com/t/how-to-implement-mfa-step-up-when-using-auth0-js-sdk-for-authentication/27722 "2025-10-23T05:22:49Z")
Hi, We integrated a standard login procedure using Username-Password-Authentication via the auth0.js library (version 9.19.4) in our React application. Now for certain calls on our api we need to step up our authenticat… --- ## [How to generate a client assertion signing key for a native app to sign in with PKCE?](https://community.auth0.com/t/how-to-generate-a-client-assertion-signing-key-for-a-native-app-to-sign-in-with-pkce/191128)
**Author:** [@jessetg](https://community.auth0.com/u/jessetg)\ **Replies:** 3\ **Last updated:** [August 27, 2025, 8:21pm UTC](https://community.auth0.com/t/how-to-generate-a-client-assertion-signing-key-for-a-native-app-to-sign-in-with-pkce/191128 "2025-08-27T20:21:04Z")
I’m working on a native app with a backend component (both in node.js), and I’m trying to authenticate the native app securely. Since the native app will be publicly distributed, I want to authenticate with the Authoriza… --- ## [How to validate the state parameter on the server in an Auth0.js Cross-Origin Authentication flow](https://community.auth0.com/t/how-to-validate-the-state-parameter-on-the-server-in-an-auth0-js-cross-origin-authentication-flow/190405)
**Author:** [@jraoult-appraised](https://community.auth0.com/u/jraoult-appraised)\ **Replies:** 3\ **Last updated:** [August 12, 2025, 5:12pm UTC](https://community.auth0.com/t/how-to-validate-the-state-parameter-on-the-server-in-an-auth0-js-cross-origin-authentication-flow/190405 "2025-08-12T17:12:44Z")
Hi, We’ve implemented a custom sign-in form using Auth0.js and have enabled a custom domain. We are using the webAuth.login() method to initiate the Cross-Origin Authentication flow. We understand that Auth0.js first c… --- ## [Error: No verifier returned from client](https://community.auth0.com/t/error-no-verifier-returned-from-client/87727)
**Author:** [@tobias.walter](https://community.auth0.com/u/tobias.walter)\ **Replies:** 4\ **Last updated:** [August 4, 2025, 1:13pm UTC](https://community.auth0.com/t/error-no-verifier-returned-from-client/87727 "2025-08-04T13:13:15Z")
Hi there, we are trying to use auth0.js for login. With Chrome it’s not a problem, but Firefox or Chrome incognito mode yields No verifier returned from client. Here is our simple test setup: index.html: \ \ **Author:** [@yudintsevegor](https://community.auth0.com/u/yudintsevegor)\ **Replies:** 5\ **Last updated:** [July 7, 2025, 6:02pm UTC](https://community.auth0.com/t/error-error-cookies-was-called-outside-a-request-scope/188318 "2025-07-07T18:02:15Z") Hello! I was following this quickstart guide. I tried to comment the usecase with /: import { NextResponse } from "next/server"; import { auth0 } from "./lib/auth0" export async function middleware(request) { tr… --- ## [loginWithPopup works on incognito and doesn't otherwise](https://community.auth0.com/t/loginwithpopup-works-on-incognito-and-doesnt-otherwise/188283)
**Author:** [@javi1](https://community.auth0.com/u/javi1)\ **Replies:** 10\ **Last updated:** [July 2, 2025, 6:12pm UTC](https://community.auth0.com/t/loginwithpopup-works-on-incognito-and-doesnt-otherwise/188283 "2025-07-02T18:12:30Z")
Hi all, I’m trying to understand what I am doing wrong here… I have a svelte SPA with “@auth0/auth0-spa-js”: “^2.1.3”. I created a js with all the loginWithPopup and logout functions that I intend to use. When I run… --- ## [Auth0 SDK API Limits](https://community.auth0.com/t/auth0-sdk-api-limits/186107)
**Author:** [@sathya.srinivasan](https://community.auth0.com/u/sathya.srinivasan)\ **Replies:** 4\ **Last updated:** [May 3, 2025, 3:21pm UTC](https://community.auth0.com/t/auth0-sdk-api-limits/186107 "2025-05-03T15:21:49Z")
Hi, I notice the error below when i read 50 users (only 17 users exist in lower environment). Please help me understand the rate limits in different environments. For every user, roles call is made. Error ManagementAp… --- ## [Caching M2M tokens (not ManagementClient)](https://community.auth0.com/t/caching-m2m-tokens-not-managementclient/138446)
**Author:** [@marcin.polinski](https://community.auth0.com/u/marcin.polinski)\ **Replies:** 10\ **Last updated:** [July 11, 2024, 7:48pm UTC](https://community.auth0.com/t/caching-m2m-tokens-not-managementclient/138446 "2024-07-11T19:48:32Z")
Hello! The goal: My goal is to reduce usage of M2M tokens. We have some internal APIs that communicate using M2M tokens and we have problems with the monthly quota (it is exceeded every month now). My initial thought w… --- ## [Can Auth0 work with Angular 7?](https://community.auth0.com/t/can-auth0-work-with-angular-7/129955)
**Author:** [@sruz](https://community.auth0.com/u/sruz)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 9:37pm UTC](https://community.auth0.com/t/can-auth0-work-with-angular-7/129955 "2024-03-19T21:37:02Z")
I’m trying to find out what auth0 library to use with an Angular 7 application and also if the instructions would be different to the current instructions in the Auth0 documentation site. --- ## [AccessToken appears to be invalid](https://community.auth0.com/t/accesstoken-appears-to-be-invalid/128777)
**Author:** [@mdebruin93](https://community.auth0.com/u/mdebruin93)\ **Replies:** 5\ **Last updated:** [March 16, 2024, 1:04am UTC](https://community.auth0.com/t/accesstoken-appears-to-be-invalid/128777 "2024-03-16T01:04:57Z")
Hello, I’ve used the quickstart scenario for SPA + API. However, my access token remains invalid (according to jwt.io) and therefor my API is also throwing Unauthorized exceptions. This is my initialization of AuthWeb: … --- ## [Getting started](https://community.auth0.com/t/getting-started/104745)
**Author:** [@samtsejerome](https://community.auth0.com/u/samtsejerome)\ **Replies:** 1\ **Last updated:** [April 14, 2023, 9:38pm UTC](https://community.auth0.com/t/getting-started/104745 "2023-04-14T21:38:21Z")
is there anysimple documentation of the fundamentals needed to use auth0? I want to secure an expressjs api, so started by looking st this sample: though it wouldnt run, but complained with “Make sure you have ISSU… --- ## [Change Language in Universal Login with custom Login form](https://community.auth0.com/t/change-language-in-universal-login-with-custom-login-form/92575)
**Author:** [@nivetha.ravi](https://community.auth0.com/u/nivetha.ravi)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 6:49pm UTC](https://community.auth0.com/t/change-language-in-universal-login-with-custom-login-form/92575 "2022-10-27T18:49:30Z")
Unable to change the language for the classic universal login with customized login screen. Tried the following options, Enabled ‘fi’ in tenant language settings. Added auth0.loginWithRedirect ({ ui\_locales: ‘fi’ }) i… --- ## [Best way to implement embedded login with session management?](https://community.auth0.com/t/best-way-to-implement-embedded-login-with-session-management/90774)
**Author:** [@vikas.dagar](https://community.auth0.com/u/vikas.dagar)\ **Replies:** 3\ **Last updated:** [September 19, 2022, 1:38pm UTC](https://community.auth0.com/t/best-way-to-implement-embedded-login-with-session-management/90774 "2022-09-19T13:38:18Z")
Please include the following information in your post: Which SDK this is regarding: SDK Version: 9.19.1 Platform Version: JavaScript Code Snippets/Error Messages/Supporting Details/Screenshots: We are developing embed… --- ## [CORS Error - New Tenant](https://community.auth0.com/t/cors-error-new-tenant/82606)
**Author:** [@Blowers.Max](https://community.auth0.com/u/Blowers.Max)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 7:26am UTC](https://community.auth0.com/t/cors-error-new-tenant/82606 "2022-04-29T07:26:29Z")
Hello, I created a new tenant to use for development and unfortunately came across the error: “Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://xxxx.us.auth0.com/pass… --- ## [Refresh Token for reload page](https://community.auth0.com/t/refresh-token-for-reload-page/69299)
**Author:** [@phu0n9](https://community.auth0.com/u/phu0n9)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 3:36pm UTC](https://community.auth0.com/t/refresh-token-for-reload-page/69299 "2021-09-13T15:36:11Z")
Hi there, I am using the MERN stack website for Auth0. And every time I refresh the page, it redirects to the Auth0 login page while the session cookie is not expired yet. I did the same with the Auth0 tutorial and i ha… --- ## [Equivalent functionality to webAuth.checkSession from auth0.js in auth0-angular for SSO](https://community.auth0.com/t/equivalent-functionality-to-webauth-checksession-from-auth0-js-in-auth0-angular-for-sso/60980)
**Author:** [@mohammadz](https://community.auth0.com/u/mohammadz)\ **Replies:** 3\ **Last updated:** [June 25, 2021, 11:24am UTC](https://community.auth0.com/t/equivalent-functionality-to-webauth-checksession-from-auth0-js-in-auth0-angular-for-sso/60980 "2021-06-25T11:24:11Z")
Which SDK this is regarding: - auth0-angular, auth0.js SDK Version: - auth0-angular@1.40.0, auth0.js@9.8.2 Platform Version: - Node 10.19.0 Hi, I was playing around with this repo and my angular 10 app. I was able … --- ## [Custom\_login\_page support php?](https://community.auth0.com/t/custom-login-page-support-php/60091)
**Author:** [@Toshi023](https://community.auth0.com/u/Toshi023)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 8:49am UTC](https://community.auth0.com/t/custom-login-page-support-php/60091 "2021-03-29T08:49:51Z")
Hi! I’ve tried to show custom login page as the universal login page in my dev environment. (The login page only use simple html, css and php) auth0.js 9.14.0 I did following setting on the tenant. I updated the cl… --- ## [User\_metadata.recaptcha value is too long (max length: 500)](https://community.auth0.com/t/user-metadata-recaptcha-value-is-too-long-max-length-500/56415)
**Author:** [@skyler.sorensen](https://community.auth0.com/u/skyler.sorensen)\ **Replies:** 1\ **Last updated:** [January 19, 2021, 2:45am UTC](https://community.auth0.com/t/user-metadata-recaptcha-value-is-too-long-max-length-500/56415 "2021-01-19T02:45:25Z")
I’ve implemented recaptcha v3 with my web application by attaching the recaptcha token to the user\_metadata on sign up and login flows. I then pick it up with a pre-registration hook and handle it from there. It was work… --- ## [Custom Domain status is ready but test throws an error](https://community.auth0.com/t/custom-domain-status-is-ready-but-test-throws-an-error/54651)
**Author:** [@quarterpi](https://community.auth0.com/u/quarterpi)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 11:09pm UTC](https://community.auth0.com/t/custom-domain-status-is-ready-but-test-throws-an-error/54651 "2020-12-30T23:09:28Z")
Hi, I have created a custom domain for my spa app which says status is ready, but when I click “test” it gives me an error Error! Looks like your domain is not configured correctly. Please take into account that the conf… --- ## [Universal login (Classic) returns a 400 Extensibility error on signup](https://community.auth0.com/t/universal-login-classic-returns-a-400-extensibility-error-on-signup/53905)
**Author:** [@james.nowecki](https://community.auth0.com/u/james.nowecki)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 10:57am UTC](https://community.auth0.com/t/universal-login-classic-returns-a-400-extensibility-error-on-signup/53905 "2020-11-30T10:57:09Z")
Hi. As a bit of background, I’ve inherited a tech stack from a start up that went bust. I have no ability to contact the previous development team. A couple of parts of their stack are using Auth0 to authenticate. The … --- ## [ReactJS - How can I get refresh token using "@auth0/auth0-spa-js"](https://community.auth0.com/t/reactjs-how-can-i-get-refresh-token-using-auth0-auth0-spa-js/51621)
**Author:** [@ktktkt](https://community.auth0.com/u/ktktkt)\ **Replies:** 1\ **Last updated:** [October 15, 2020, 11:05am UTC](https://community.auth0.com/t/reactjs-how-can-i-get-refresh-token-using-auth0-auth0-spa-js/51621 "2020-10-15T11:05:29Z")
Is there a way to use the auth0-spa-js library to get refresh token? I can get access token or Id-token with built-in functions. I looked through the source code and seems like auth0-spa-js stores the refresh token cach… --- ## [Password reset form – no "back to app" button](https://community.auth0.com/t/password-reset-form-no-back-to-app-button/42948)
**Author:** [@vui](https://community.auth0.com/u/vui)\ **Replies:** 6\ **Last updated:** [May 20, 2020, 8:05am UTC](https://community.auth0.com/t/password-reset-form-no-back-to-app-button/42948 "2020-05-20T08:05:28Z")
After a successful password change we want the user to get an option to return to our own implementation of a login page in our app. This button should be actually there if the “Redirect To” field in the Email Templates… --- ## [Auth0-js with PKCE](https://community.auth0.com/t/auth0-js-with-pkce/33044)
**Author:** [@mcardle.liam](https://community.auth0.com/u/mcardle.liam)\ **Replies:** 9\ **Last updated:** [April 28, 2020, 8:02am UTC](https://community.auth0.com/t/auth0-js-with-pkce/33044 "2020-04-28T08:02:38Z")
Does the Auth0-js library support the Authorization Code Grant Flow with PKCE Grant? I do not see it in the auth0-js documentation. --- ## [How to get the roles a user is assigned to in the dashboard](https://community.auth0.com/t/how-to-get-the-roles-a-user-is-assigned-to-in-the-dashboard/41202)
**Author:** [@tnwanna](https://community.auth0.com/u/tnwanna)\ **Replies:** 2\ **Last updated:** [April 17, 2020, 1:01pm UTC](https://community.auth0.com/t/how-to-get-the-roles-a-user-is-assigned-to-in-the-dashboard/41202 "2020-04-17T13:01:37Z")
I’ve seen a number of guides about assigning roles to the idToken based on some rules, but I’m just trying to read the role I manually assigned a user to in the dashboard (as in from going to Users & Roles \> Roles \> crea… --- ## [How to get the access token and id token using react-auth0-spa?](https://community.auth0.com/t/how-to-get-the-access-token-and-id-token-using-react-auth0-spa/39254)
**Author:** [@mohd.ilyas](https://community.auth0.com/u/mohd.ilyas)\ **Replies:** 5\ **Last updated:** [March 17, 2020, 9:11pm UTC](https://community.auth0.com/t/how-to-get-the-access-token-and-id-token-using-react-auth0-spa/39254 "2020-03-17T21:11:37Z")
Hi I am trying to integrate React with Auth0 and I am using the functions provided by react-auth0-spa.js. In this, there is a function loginWithRedirect that redirects a user to Auth0 universal login page if the user h… --- ## [What is the difference between auth0-php sdk and auth0 sdk for web](https://community.auth0.com/t/what-is-the-difference-between-auth0-php-sdk-and-auth0-sdk-for-web/24979)
**Author:** [@babalolaferanmi8](https://community.auth0.com/u/babalolaferanmi8)\ **Replies:** 0\ **Last updated:** [May 8, 2019, 1:24pm UTC](https://community.auth0.com/t/what-is-the-difference-between-auth0-php-sdk-and-auth0-sdk-for-web/24979 "2019-05-08T13:24:06Z")
Hello I’ve been trying to use auth0 with my php web app login UI, but i don’t know which way to go, will auth0-php sdk do the work or auth0 sdk for web, i also came across custom signup, please i need help, because am st… --- ## ["Provide a Login Control" Issues](https://community.auth0.com/t/provide-a-login-control-issues/22546)
**Author:** [@nsena](https://community.auth0.com/u/nsena)\ **Replies:** 8\ **Last updated:** [March 27, 2019, 9:35pm UTC](https://community.auth0.com/t/provide-a-login-control-issues/22546 "2019-03-27T21:35:00Z")
Hello, I am following this auth0 tutorial here. Under the “Provide a Login Control” subtitle I have had no issue and pasted the desired text, but there is no demonstration of how to link Auth’s isAuthenticated() functio… --- ## [Cookies on Hosted Login Page](https://community.auth0.com/t/cookies-on-hosted-login-page/18584)
**Author:** [@user792](https://community.auth0.com/u/user792)\ **Replies:** 1\ **Last updated:** [December 1, 2018, 7:30pm UTC](https://community.auth0.com/t/cookies-on-hosted-login-page/18584 "2018-12-01T19:30:04Z")
Is there any way to remember & store user information on the HLP through cookies? I’m using Auth0.js. --- ## [Refresh token within Ionic App](https://community.auth0.com/t/refresh-token-within-ionic-app/7498)
**Author:** [@dan.kellett](https://community.auth0.com/u/dan.kellett)\ **Replies:** 3\ **Last updated:** [July 13, 2017, 8:46pm UTC](https://community.auth0.com/t/refresh-token-within-ionic-app/7498 "2017-07-13T20:46:25Z")
Is it possible to refresh a token within a Ionic/Cordova app? I’m looking at the renewAuth function in auth0.js, but not sure what the config object values should be. Specifically the redirectUri value.