# \#authentication-sessions **URL:** https://community.auth0.com/tag/authentication-sessions/2093.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Athorization stopped saving and started asking consent on localhost](https://community.auth0.com/t/athorization-stopped-saving-and-started-asking-consent-on-localhost/200046)
**Author:** [@yaroslavtereshchuk](https://community.auth0.com/u/yaroslavtereshchuk)\ **Replies:** 5\ **Last updated:** [May 20, 2026, 8:20pm UTC](https://community.auth0.com/t/athorization-stopped-saving-and-started-asking-consent-on-localhost/200046 "2026-05-20T20:20:51Z")
Hi, after the weekend, my website on the localhost started requesting “\*\*\* Client is requesting access to your dev-\*\*\* account", and it stopped saving the session and started asking to log in on every page reload. What … --- ## [SPA: custom domain + silent auth vs refresh tokens + rotation](https://community.auth0.com/t/spa-custom-domain-silent-auth-vs-refresh-tokens-rotation/197360)
**Author:** [@chris\_b](https://community.auth0.com/u/chris_b)\ **Replies:** 3\ **Last updated:** [February 19, 2026, 7:43pm UTC](https://community.auth0.com/t/spa-custom-domain-silent-auth-vs-refresh-tokens-rotation/197360 "2026-02-19T19:43:09Z")
Hi all, we have auth0 tenants with custom domains (auth.product.com) and a spa (web.product.com) which talks to our spring api. Is there a general recommendation what mechanism we should use? Cookies + Silent-Auth vs. … --- ## [Auth0-nuxt and access to the user data in callback](https://community.auth0.com/t/auth0-nuxt-and-access-to-the-user-data-in-callback/196759)
**Author:** [@aleksandra](https://community.auth0.com/u/aleksandra)\ **Replies:** 1\ **Last updated:** [January 30, 2026, 4:40pm UTC](https://community.auth0.com/t/auth0-nuxt-and-access-to-the-user-data-in-callback/196759 "2026-01-30T16:40:07Z")
Hi there, I am starting implementation with the new SDK for Nuxt applications (auth0-nuxt). I am creating server routes: login and callback, but I would like to know if during login it is possible to obtain an email and… --- ## [Refused to display 'https://auth.priz.guru/' in a frame because it set 'X-Frame-Options' to 'sameorigin'](https://community.auth0.com/t/refused-to-display-https-auth-priz-guru-in-a-frame-because-it-set-x-frame-options-to-sameorigin/195103)
**Author:** [@shurika](https://community.auth0.com/u/shurika)\ **Replies:** 1\ **Last updated:** [December 2, 2025, 4:57am UTC](https://community.auth0.com/t/refused-to-display-https-auth-priz-guru-in-a-frame-because-it-set-x-frame-options-to-sameorigin/195103 "2025-12-02T04:57:03Z")
Hi all, We have been using the custom login pages through Auth0 for a while now; however, lately, the token renewal has started failing. What we should uncover is that most likely our Content-Security-policy was not s… --- ## [React Router v7 template](https://community.auth0.com/t/react-router-v7-template/194484)
**Author:** [@alessandro.vitali](https://community.auth0.com/u/alessandro.vitali)\ **Replies:** 2\ **Last updated:** [December 2, 2025, 2:04am UTC](https://community.auth0.com/t/react-router-v7-template/194484 "2025-12-02T02:04:17Z")
Hi, it looks like there is no React Router v7 template/example right now, but it should have been in the Q1 backlog based on past response I found in a closed post. Is there any update? --- ## [Session Lifetime Limit — Max 3 Days? How to Configure for Longer Sessions](https://community.auth0.com/t/session-lifetime-limit-max-3-days-how-to-configure-for-longer-sessions/195014)
**Author:** [@chenchang.lew](https://community.auth0.com/u/chenchang.lew)\ **Replies:** 1\ **Last updated:** [November 28, 2025, 7:12pm UTC](https://community.auth0.com/t/session-lifetime-limit-max-3-days-how-to-configure-for-longer-sessions/195014 "2025-11-28T19:12:35Z")
We are trying to configure longer login persistence in our production tenant and have run into a limitation. Specifically, we want to set: Idle Session Lifetime (Persistent) → ~12 weeks Maximum Session Lifetime (P… --- ## [Check if user is authenticated from an external marketing website (webflow)](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417)
**Author:** [@ac831](https://community.auth0.com/u/ac831)\ **Replies:** 1\ **Last updated:** [November 14, 2025, 7:18pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417 "2025-11-14T19:18:58Z")
We use auth0 for login to our production saas app, located on app . example . com We have a marketing website at example . com which was built on Webflow. I’m wondering if there is any best practice or light front end … --- ## [Next.js SDK v4 — how to correctly extend/roll app session expiry (idle 30m, absolute 8h)](https://community.auth0.com/t/next-js-sdk-v4-how-to-correctly-extend-roll-app-session-expiry-idle-30m-absolute-8h/191893)
**Author:** [@akshay3](https://community.auth0.com/u/akshay3)\ **Replies:** 6\ **Last updated:** [November 12, 2025, 6:44pm UTC](https://community.auth0.com/t/next-js-sdk-v4-how-to-correctly-extend-roll-app-session-expiry-idle-30m-absolute-8h/191893 "2025-11-12T18:44:36Z")
Hi, Right now my session is expiring right after inactivityDuration: 30 \* 60 (30 minutes). I want the session to automatically extend on user activity (e.g., API calls, page navigation) but still enforce an absolute max… --- ## [I'm facing an issue with my Vue.js app — when I refresh the page in the Safari browser, it logs me out even though I'm logged in.](https://community.auth0.com/t/im-facing-an-issue-with-my-vue-js-app-when-i-refresh-the-page-in-the-safari-browser-it-logs-me-out-even-though-im-logged-in/193681)
**Author:** [@theumarrasheed](https://community.auth0.com/u/theumarrasheed)\ **Replies:** 1\ **Last updated:** [October 27, 2025, 4:36pm UTC](https://community.auth0.com/t/im-facing-an-issue-with-my-vue-js-app-when-i-refresh-the-page-in-the-safari-browser-it-logs-me-out-even-though-im-logged-in/193681 "2025-10-27T16:36:11Z")
I’m facing an issue with my Vue.js app — when I refresh the page in the Safari browser, it logs me out even though I’m logged in. --- ## [Can't authenticate user on Next v15 API Route Handler, can't getSession or updateSession from auth0 client](https://community.auth0.com/t/cant-authenticate-user-on-next-v15-api-route-handler-cant-getsession-or-updatesession-from-auth0-client/193586)
**Author:** [@Piotr.Lenartowicz](https://community.auth0.com/u/Piotr.Lenartowicz)\ **Replies:** 4\ **Last updated:** [October 27, 2025, 2:57pm UTC](https://community.auth0.com/t/cant-authenticate-user-on-next-v15-api-route-handler-cant-getsession-or-updatesession-from-auth0-client/193586 "2025-10-27T14:57:52Z")
I’m upgrading from NextJs 14 to 15. In 15 I cannot use auth0.updateSession() method in Server Action (Server Function) not triggered by Form, event handler or useEffect hook. I got Server Function defined which I invoke… --- ## [Next.js + Auth0 implementation with Session Management](https://community.auth0.com/t/next-js-auth0-implementation-with-session-management/192481)
**Author:** [@hwng](https://community.auth0.com/u/hwng)\ **Replies:** 2\ **Last updated:** [October 21, 2025, 10:16pm UTC](https://community.auth0.com/t/next-js-auth0-implementation-with-session-management/192481 "2025-10-21T22:16:07Z")
Setup Hi there, I am currently developing a web application for our team’s project that is currently using Auth0 as the authentication system. Our technology stack includes: Next.js, React + TypeScript, and using Node.js… --- ## [Title: ASWebAuthenticationSession fails when Chrome is open & Safari is closed → Scheme '(null)' is not valid as per RFC 3986](https://community.auth0.com/t/title-aswebauthenticationsession-fails-when-chrome-is-open-safari-is-closed-scheme-null-is-not-valid-as-per-rfc-3986/192238)
**Author:** [@lam1310](https://community.auth0.com/u/lam1310)\ **Replies:** 1\ **Last updated:** [September 25, 2025, 3:56pm UTC](https://community.auth0.com/t/title-aswebauthenticationsession-fails-when-chrome-is-open-safari-is-closed-scheme-null-is-not-valid-as-per-rfc-3986/192238 "2025-09-25T15:56:46Z")
Environment App: Flutter desktop (macOS primary; Windows/Linux also used) SDK/Packages: auth0\_flutter Platforms: macOS, Windows/Linux unaffected Browser state: Chrome open, Safari closed (Chrome default) S… --- ## [A CORS error appears in the console](https://community.auth0.com/t/a-cors-error-appears-in-the-console/191511)
**Author:** [@MSK1116](https://community.auth0.com/u/MSK1116)\ **Replies:** 3\ **Last updated:** [September 16, 2025, 3:13pm UTC](https://community.auth0.com/t/a-cors-error-appears-in-the-console/191511 "2025-09-16T15:13:18Z")
// \\frontend\\src\\app\\chat\\\[...slug\]\\page.jsx import { notFound, redirect } from "next/navigation"; import mongoDbCreateUser from "@/lib/mongoDbCreateUser"; import ChatWrapper from "@/app/chat/\[...slug\]/ChatWrapper"; impo… --- ## [How to Create the auth0 session manually to authorise uses that comes thwow custome SSO setup](https://community.auth0.com/t/how-to-create-the-auth0-session-manually-to-authorise-uses-that-comes-thwow-custome-sso-setup/151330)
**Author:** [@zls](https://community.auth0.com/u/zls)\ **Replies:** 3\ **Last updated:** [September 12, 2025, 6:36pm UTC](https://community.auth0.com/t/how-to-create-the-auth0-session-manually-to-authorise-uses-that-comes-thwow-custome-sso-setup/151330 "2025-09-12T18:36:48Z")
I have two apps: one is a Single Page Application (SPA) for my email/password login users, and the other is a Machine-to-Machine (M2M) app. Both apps are used on my website. I have also integrated a custom Single Sign-On… --- ## [getSession() returns user, but silent login requires login](https://community.auth0.com/t/getsession-returns-user-but-silent-login-requires-login/190783)
**Author:** [@dkruis](https://community.auth0.com/u/dkruis)\ **Replies:** 6\ **Last updated:** [August 28, 2025, 3:16pm UTC](https://community.auth0.com/t/getsession-returns-user-but-silent-login-requires-login/190783 "2025-08-28T15:16:54Z")
Hi, I’m running into a problem in our Next.js WebApp. In our middleware we retrieve the session using the Auth0Client.getSession() function and then based on some condition we re-authenticate the user using a silent lo… --- ## [Node 22 upgrade results in "unexpected end of file"](https://community.auth0.com/t/node-22-upgrade-results-in-unexpected-end-of-file/187391)
**Author:** [@esumerfield](https://community.auth0.com/u/esumerfield)\ **Replies:** 6\ **Last updated:** [July 31, 2025, 7:09pm UTC](https://community.auth0.com/t/node-22-upgrade-results-in-unexpected-end-of-file/187391 "2025-07-31T19:09:57Z")
Upgrading to node 22, or 18, results login scripts failing with “unexpected end of file”. Based on this problem solution I need node 1.2.3, however that is not available in the node 22 runtimes. What do you suggest? S… --- ## [Authentication between a website and an embedded widget (iframe or shadowDOM)](https://community.auth0.com/t/authentication-between-a-website-and-an-embedded-widget-iframe-or-shadowdom/189500)
**Author:** [@nish\_rm](https://community.auth0.com/u/nish_rm)\ **Replies:** 3\ **Last updated:** [July 24, 2025, 6:54pm UTC](https://community.auth0.com/t/authentication-between-a-website-and-an-embedded-widget-iframe-or-shadowdom/189500 "2025-07-24T18:54:00Z")
I am extending a widget application(Client B) to be added to a website(Client A) of a business client. An authenticated user in Client A should be able to seamlessly login to Client B. If that is not possible, the user … --- ## [Auth0 Bearer Token SID Repeats Across Users](https://community.auth0.com/t/auth0-bearer-token-sid-repeats-across-users/189181)
**Author:** [@Titorr2001](https://community.auth0.com/u/Titorr2001)\ **Replies:** 1\ **Last updated:** [July 17, 2025, 10:57am UTC](https://community.auth0.com/t/auth0-bearer-token-sid-repeats-across-users/189181 "2025-07-17T10:57:50Z")
Hi everyone, I’m encountering an issue with Auth0’s bearer tokens, specifically regarding the sid (session ID) claim. Here’s what happened: I was logged in as User A, and their session eventually expired. Afterwards,… --- ## [Cross-Domain Auth with Auth0 for Embedded Widget](https://community.auth0.com/t/cross-domain-auth-with-auth0-for-embedded-widget/188685)
**Author:** [@zohaibt](https://community.auth0.com/u/zohaibt)\ **Replies:** 1\ **Last updated:** [July 2, 2025, 5:33pm UTC](https://community.auth0.com/t/cross-domain-auth-with-auth0-for-embedded-widget/188685 "2025-07-02T17:33:37Z")
Hi, We’re building a product. Users log in on main site example.com, and install our widget (via npm) on their site like demo.com. I want the widget to detect if the user is logged in on example.com (same browser) using … --- ## [getSession in next middleware randomly starts retuning null for users](https://community.auth0.com/t/getsession-in-next-middleware-randomly-starts-retuning-null-for-users/187213)
**Author:** [@faizansaleem13504](https://community.auth0.com/u/faizansaleem13504)\ **Replies:** 2\ **Last updated:** [May 27, 2025, 12:19pm UTC](https://community.auth0.com/t/getsession-in-next-middleware-randomly-starts-retuning-null-for-users/187213 "2025-05-27T12:19:46Z")
getSession in next middleware randomly starts retuning null for users. As a result, user is navigated back to login page and after logging in, even then getSession doesn’t return valid user session. I am using @auth0/n… --- ## [Redirect to back Auth0 react app from third party shows user as unauthenticated](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759)
**Author:** [@lritter1](https://community.auth0.com/u/lritter1)\ **Replies:** 3\ **Last updated:** [May 26, 2025, 1:38am UTC](https://community.auth0.com/t/redirect-to-back-auth0-react-app-from-third-party-shows-user-as-unauthenticated/130759 "2025-05-26T01:38:13Z")
Here’s the scenario. For context we have a react app that we use the Auth0 sdk in for authentication. Everything works correctly there and we use the useAuth0 hook to get the user and authentication state The user use … --- ## [Forcing users to login again, ramification on sessions](https://community.auth0.com/t/forcing-users-to-login-again-ramification-on-sessions/186549)
**Author:** [@michael23](https://community.auth0.com/u/michael23)\ **Replies:** 1\ **Last updated:** [May 12, 2025, 6:14pm UTC](https://community.auth0.com/t/forcing-users-to-login-again-ramification-on-sessions/186549 "2025-05-12T18:14:37Z")
When you force a user to login via passing prompt=login as a query parameter when making the login request, what happens at the Auth0 authorization server session-level? For example- Say you have two different applicati… --- ## [Keeping a session alive](https://community.auth0.com/t/keeping-a-session-alive/130525)
**Author:** [@david.s](https://community.auth0.com/u/david.s)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 6:56pm UTC](https://community.auth0.com/t/keeping-a-session-alive/130525 "2025-04-30T18:56:41Z")
On web, Auth0 provides a session cookie that keeps the user’s session active as long as there is activity. We would like to do the same thing on mobile. Current behavior: Currently, both the id\_token and access\_token … --- ## [Storing access tokens in HttpOnly Secure SameSite=Strict cookie?](https://community.auth0.com/t/storing-access-tokens-in-httponly-secure-samesite-strict-cookie/132422)
**Author:** [@sam2099](https://community.auth0.com/u/sam2099)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 4:51pm UTC](https://community.auth0.com/t/storing-access-tokens-in-httponly-secure-samesite-strict-cookie/132422 "2025-04-30T16:51:21Z")
Setup: Proxy Server handles domain and routes requests Micro Frontends domain/app1, domain/app2, etc. Distributed APIs domain/api/app1, domain/api/app2, etc. Proposed Flow: Auth flow started by user using aut… --- ## [isAuthenticated failing on refresh](https://community.auth0.com/t/isauthenticated-failing-on-refresh/186109)
**Author:** [@roamingstars](https://community.auth0.com/u/roamingstars)\ **Replies:** 4\ **Last updated:** [April 30, 2025, 3:08pm UTC](https://community.auth0.com/t/isauthenticated-failing-on-refresh/186109 "2025-04-30T15:08:35Z")
I’m writing a React web app and I’m creating a new auth0Client in my useEffect on every mount. I’m having users log in with loginWithPopup. Then I’m checking isAuthenticated and getUser, both of which work fine, until I … --- ## [How can i get session expiration now that the appSession cookie is encrypted?](https://community.auth0.com/t/how-can-i-get-session-expiration-now-that-the-appsession-cookie-is-encrypted/185536)
**Author:** [@AuthUser121](https://community.auth0.com/u/AuthUser121)\ **Replies:** 2\ **Last updated:** [April 17, 2025, 5:24pm UTC](https://community.auth0.com/t/how-can-i-get-session-expiration-now-that-the-appsession-cookie-is-encrypted/185536 "2025-04-17T17:24:22Z")
Previously I was using the appSession cookie to check when the session expires and show a notification on the front end. In v4 that cookie is encrypted how would i get this data? --- ## [In post-login action, how to distinguish initial session login from reuse of existing session?](https://community.auth0.com/t/in-post-login-action-how-to-distinguish-initial-session-login-from-reuse-of-existing-session/184572)
**Author:** [@eterobby](https://community.auth0.com/u/eterobby)\ **Replies:** 3\ **Last updated:** [April 11, 2025, 6:29pm UTC](https://community.auth0.com/t/in-post-login-action-how-to-distinguish-initial-session-login-from-reuse-of-existing-session/184572 "2025-04-11T18:29:13Z")
Context I’m writing a post-login action that uses the IdP access token for a custom OAuth2 connection to fetch specific information from the IdP upon login and store that information in the user’s app\_metadata. Previous… --- ## [Decode encrypted appSession cookie in go middleware](https://community.auth0.com/t/decode-encrypted-appsession-cookie-in-go-middleware/151485)
**Author:** [@auth\_learner](https://community.auth0.com/u/auth_learner)\ **Replies:** 3\ **Last updated:** [April 2, 2025, 2:39pm UTC](https://community.auth0.com/t/decode-encrypted-appsession-cookie-in-go-middleware/151485 "2025-04-02T14:39:11Z")
Ready to post? :mag: First, try searching for your answer. I have a application that has a NextJs web app backed by a Go (Echo server) backend service. From the UI/Browser if the API call goes from Browser → NextJS web… --- ## [Implement SSO between multiple applications with different domains. Is it possible via Auth0?](https://community.auth0.com/t/implement-sso-between-multiple-applications-with-different-domains-is-it-possible-via-auth0/184206)
**Author:** [@mostafa.moniem90](https://community.auth0.com/u/mostafa.moniem90)\ **Replies:** 5\ **Last updated:** [March 25, 2025, 2:54pm UTC](https://community.auth0.com/t/implement-sso-between-multiple-applications-with-different-domains-is-it-possible-via-auth0/184206 "2025-03-25T14:54:40Z")
I have two applications: Ninja and Samurai. • Ninja is a multi-tenant application hosted under ninja.com, running on a single web server for all customers. • Samurai, on the other hand, is a single-tenant application, … --- ## [Final redirect not working - Decap + Auth0 + Github](https://community.auth0.com/t/final-redirect-not-working-decap-auth0-github/183509)
**Author:** [@gg81](https://community.auth0.com/u/gg81)\ **Replies:** 1\ **Last updated:** [March 10, 2025, 7:45pm UTC](https://community.auth0.com/t/final-redirect-not-working-decap-auth0-github/183509 "2025-03-10T19:45:49Z")
I am using Decap, and need Github authentication, which I am trying to get through Auth0. Everything is fine until the final redirect of Auth0 back to my application. If I set the redirect\_uri to be deliberately incorrec… [Next page](https://community.auth0.com/tag/authentication-sessions/2093.md?match_all_tags=true&page=1&tags%5B%5D=authentication-sessions)