# \#consent **URL:** https://community.auth0.com/tag/consent/158.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Silent Authentication Systematically Requiring Consent in SPA - Breaking Token Rotation for oidc-spa Library Users](https://community.auth0.com/t/silent-authentication-systematically-requiring-consent-in-spa-breaking-token-rotation-for-oidc-spa-library-users/201575)
**Author:** [@garronej](https://community.auth0.com/u/garronej)\ **Replies:** 5\ **Last updated:** [August 3, 2026, 7:13pm UTC](https://community.auth0.com/t/silent-authentication-systematically-requiring-consent-in-spa-breaking-token-rotation-for-oidc-spa-library-users/201575 "2026-08-03T19:13:36Z")
I’m the maintainer of oidc-spa, a provider-agnostic OIDC client library for single page applications ( Auth0 | OIDC SPA ). I’m reporting a critical issue affecting all Auth0 users of our library where silent authenticati… --- ## [Consent screen appears on every login despite First-party Native app + "Allow Skipping User Consent" enabled](https://community.auth0.com/t/consent-screen-appears-on-every-login-despite-first-party-native-app-allow-skipping-user-consent-enabled/201464)
**Author:** [@timcallagy](https://community.auth0.com/u/timcallagy)\ **Replies:** 1\ **Last updated:** [July 7, 2026, 10:33pm UTC](https://community.auth0.com/t/consent-screen-appears-on-every-login-despite-first-party-native-app-allow-skipping-user-consent-enabled/201464 "2026-07-07T22:33:20Z")
Hi all, hoping someone can help me figure out why the Auth0 “Authorize App” consent screen keeps appearing on every login in my Android React Native app. As far as I can tell the configuration is correct, so I’m stuck. … --- ## [Can we do customiztion in CIBA denial screen](https://community.auth0.com/t/can-we-do-customiztion-in-ciba-denial-screen/199415)
**Author:** [@rdhayanithi](https://community.auth0.com/u/rdhayanithi)\ **Replies:** 1\ **Last updated:** [April 28, 2026, 10:33pm UTC](https://community.auth0.com/t/can-we-do-customiztion-in-ciba-denial-screen/199415 "2026-04-28T22:33:51Z")
We are implementing Auth0 CIBA (Client‑Initiated Backchannel Authentication) using the email approval flow and would like to understand what level of customization is supported for the Deny experience. Proposed user flo… --- ## [Need help in oauth2 setup](https://community.auth0.com/t/need-help-in-oauth2-setup/183968)
**Author:** [@letmeknow](https://community.auth0.com/u/letmeknow)\ **Replies:** 1\ **Last updated:** [March 31, 2025, 9:20pm UTC](https://community.auth0.com/t/need-help-in-oauth2-setup/183968 "2025-03-31T21:20:58Z")
I have simple google oauth2 setup with permissions calendar and gmail now what I want is when I login on my app it goes via normal process but only takes profile and all as in scope for login as usual. after that I ha… --- ## [How would I go about revoking permission for a 3rd party after the user has authenticated from their side (through authorization code flow)](https://community.auth0.com/t/how-would-i-go-about-revoking-permission-for-a-3rd-party-after-the-user-has-authenticated-from-their-side-through-authorization-code-flow/133121)
**Author:** [@jack.broadhurst](https://community.auth0.com/u/jack.broadhurst)\ **Replies:** 1\ **Last updated:** [March 13, 2025, 8:21pm UTC](https://community.auth0.com/t/how-would-i-go-about-revoking-permission-for-a-3rd-party-after-the-user-has-authenticated-from-their-side-through-authorization-code-flow/133121 "2025-03-13T20:21:51Z")
The scenario is a user on a trusted 3rd party platform with client credentials has gone through our universal login (auth code flow) and now the 3rd party can access our API on their behalf using a refresh/access token. … --- ## [Social Login fails in Safari + Apple devices for SPA](https://community.auth0.com/t/social-login-fails-in-safari-apple-devices-for-spa/149591)
**Author:** [@rofe](https://community.auth0.com/u/rofe)\ **Replies:** 1\ **Last updated:** [October 11, 2024, 4:26pm UTC](https://community.auth0.com/t/social-login-fails-in-safari-apple-devices-for-spa/149591 "2024-10-11T16:26:14Z")
I have a react web app, and social login enabled (google) . Login from web and android with chrome browser works fine , but however it fails in primarily in Apple and safari browsers. It keeps loading in the callback url… --- ## [Scopes VS RBAC with respect to Access Control](https://community.auth0.com/t/scopes-vs-rbac-with-respect-to-access-control/148354)
**Author:** [@jquerijero](https://community.auth0.com/u/jquerijero)\ **Replies:** 3\ **Last updated:** [October 4, 2024, 6:35pm UTC](https://community.auth0.com/t/scopes-vs-rbac-with-respect-to-access-control/148354 "2024-10-04T18:35:03Z")
Do you normally chose one or the other when implementing access control, or do Scopes and RBAC serve different purpose that you can use them at the same time? Again this is with respect to the API/resources when checking… --- ## [Allowing users to create api keys](https://community.auth0.com/t/allowing-users-to-create-api-keys/141864)
**Author:** [@truescope](https://community.auth0.com/u/truescope)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 3:47am UTC](https://community.auth0.com/t/allowing-users-to-create-api-keys/141864 "2024-09-10T03:47:04Z")
Right now we have an application and api configured in auth0. We’d like to offer users the ability to create their own access\_token and access our api’s directly. Should i use the management api to create a new M2M appl… --- ## [Authorize App Screen Showing Wrong Domain](https://community.auth0.com/t/authorize-app-screen-showing-wrong-domain/120977)
**Author:** [@hansonec207](https://community.auth0.com/u/hansonec207)\ **Replies:** 3\ **Last updated:** [November 19, 2023, 2:28am UTC](https://community.auth0.com/t/authorize-app-screen-showing-wrong-domain/120977 "2023-11-19T02:28:27Z")
Hello! I’m new to Auth0 and just setting up my first app using it. However, something is confusing me about the consent screen shown below. I expect it to say that it is requesting access to my Google account. Howev… --- ## [Skip Consent Dialog for Electron App](https://community.auth0.com/t/skip-consent-dialog-for-electron-app/118414)
**Author:** [@displagent](https://community.auth0.com/u/displagent)\ **Replies:** 4\ **Last updated:** [October 25, 2023, 4:06am UTC](https://community.auth0.com/t/skip-consent-dialog-for-electron-app/118414 "2023-10-25T04:06:34Z")
Hi Auth0 Team, I am evidently one of the very few people on this entire platform that uses Auth0 for an Electron app. I have developed an Electron app that uses the Universal Login, and when a user signs up and creates… --- ## [User's Access to Applications](https://community.auth0.com/t/users-access-to-applications/117248)
**Author:** [@Aafreen\_Khan](https://community.auth0.com/u/Aafreen_Khan)\ **Replies:** 2\ **Last updated:** [October 11, 2023, 10:14am UTC](https://community.auth0.com/t/users-access-to-applications/117248 "2023-10-11T10:14:23Z")
Hi community, @rueben.tiow @dan.woda @dawid.matuszczyk I have a question related to the application access control. According to my understanding all the users can access an application who belong to the connection wh… --- ## [Cookies Issued Without User Consent](https://community.auth0.com/t/cookies-issued-without-user-consent/113769)
**Author:** [@matthewyoung245](https://community.auth0.com/u/matthewyoung245)\ **Replies:** 1\ **Last updated:** [August 18, 2023, 2:37pm UTC](https://community.auth0.com/t/cookies-issued-without-user-consent/113769 "2023-08-18T14:37:31Z")
Does the link below cover the consent of using cookies on a users device? --- ## [Excluding users from MFA with rules breaks consent pop up](https://community.auth0.com/t/excluding-users-from-mfa-with-rules-breaks-consent-pop-up/93959)
**Author:** [@nitzan](https://community.auth0.com/u/nitzan)\ **Replies:** 4\ **Last updated:** [July 21, 2023, 4:45am UTC](https://community.auth0.com/t/excluding-users-from-mfa-with-rules-breaks-consent-pop-up/93959 "2023-07-21T04:45:39Z")
We added a rule that overwrites the context.multifactor field for users with specific user names. The exclusion itself worked as expected, but we saw an issue with the first log in of new users: after approving in the co… --- ## [Confirming User Data Deletion](https://community.auth0.com/t/confirming-user-data-deletion/109067)
**Author:** [@auth017](https://community.auth0.com/u/auth017)\ **Replies:** 3\ **Last updated:** [June 13, 2023, 11:40am UTC](https://community.auth0.com/t/confirming-user-data-deletion/109067 "2023-06-13T11:40:46Z")
I’m going though the process of removing old unused tenants, and wanted to know if it’s possible to get confirmation that all user data has indeed been deleted following the deletion of a tenant? Is there a docs page con… --- ## [Unable to switch tenant](https://community.auth0.com/t/unable-to-switch-tenant/108185)
**Author:** [@mike27](https://community.auth0.com/u/mike27)\ **Replies:** 3\ **Last updated:** [June 2, 2023, 8:10am UTC](https://community.auth0.com/t/unable-to-switch-tenant/108185 "2023-06-02T08:10:10Z")
I cant switch the tenant. It does not show my other tenants when I click on it. I already cleared browser history and unfortunately, I don’t have another device. --- ## [How to set up end\_session\_endpoint](https://community.auth0.com/t/how-to-set-up-end-session-endpoint/105606)
**Author:** [@jayaraman.p](https://community.auth0.com/u/jayaraman.p)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 7:34pm UTC](https://community.auth0.com/t/how-to-set-up-end-session-endpoint/105606 "2023-05-02T19:34:18Z")
how to set up end\_session\_endpoint. I have configured allowed logout URLs but it is not redirecting. It just redirecting to “/login?logout” by default. When I check the ReactiveClientRegistrationRepository in my proje… --- ## [Stop Prompting for Consent to First Party Application](https://community.auth0.com/t/stop-prompting-for-consent-to-first-party-application/103222)
**Author:** [@Brent](https://community.auth0.com/u/Brent)\ **Replies:** 3\ **Last updated:** [April 3, 2023, 1:27pm UTC](https://community.auth0.com/t/stop-prompting-for-consent-to-first-party-application/103222 "2023-04-03T13:27:35Z")
I have an SPA application that I have verified is marked as is\_first\_party = true. No matter what I do, whenver I register a new user through the Universal Login, it prompts for consent for the application to access the… --- ## [Adding consent and privacy checkbox to universal signin](https://community.auth0.com/t/adding-consent-and-privacy-checkbox-to-universal-signin/69014)
**Author:** [@david23](https://community.auth0.com/u/david23)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 9:53pm UTC](https://community.auth0.com/t/adding-consent-and-privacy-checkbox-to-universal-signin/69014 "2021-09-02T21:53:45Z")
Hello, I am looking for a way to add a consent (terms and privacy) checkbox to the universal signin page, we are currently using the new universal signin feature and it seems to me that we need to switch over the classic… --- ## [Can I set the consent decsription for offline\_access?](https://community.auth0.com/t/can-i-set-the-consent-decsription-for-offline-access/55792)
**Author:** [@carolus](https://community.auth0.com/u/carolus)\ **Replies:** 2\ **Last updated:** [April 2, 2021, 9:22am UTC](https://community.auth0.com/t/can-i-set-the-consent-decsription-for-offline-access/55792 "2021-04-02T09:22:41Z")
I can happily set the constent descriptions on content page using the API as can be seen from the screenshot. As you can see the custom descriptions are set but I cannot set the offline\_access scope description to so… --- ## [How do I skip the consent page for my API via Deploy cli?](https://community.auth0.com/t/how-do-i-skip-the-consent-page-for-my-api-via-deploy-cli/59718)
**Author:** [@mahipal.gurjala](https://community.auth0.com/u/mahipal.gurjala)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 4:11pm UTC](https://community.auth0.com/t/how-do-i-skip-the-consent-page-for-my-api-via-deploy-cli/59718 "2021-03-25T16:11:46Z")
Manually going to the dashboard and enable the Allow Skipping User Consent it’s working but when I want to enable this section via deploy cli its not working. I have enabled all the flags inside tenant settings(insid… --- ## [Changing scope descriptions for openId and offline\_access](https://community.auth0.com/t/changing-scope-descriptions-for-openid-and-offline-access/59123)
**Author:** [@arthuston-abacus](https://community.auth0.com/u/arthuston-abacus)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 11:08pm UTC](https://community.auth0.com/t/changing-scope-descriptions-for-openid-and-offline-access/59123 "2021-03-10T23:08:35Z")
We are using the new universal login screen, can we control the text that is displayed for each of the scopes, we want them to be human-readable. Some of the scopes will be in the normal formats, e.g. ‘read:’, ‘update:’… --- ## [Displaying multi-word scopes](https://community.auth0.com/t/displaying-multi-word-scopes/58316)
**Author:** [@arthuston-abacus](https://community.auth0.com/u/arthuston-abacus)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 9:27pm UTC](https://community.auth0.com/t/displaying-multi-word-scopes/58316 "2021-02-24T21:27:14Z")
We have multi-word scopes, similar to: Name Description read:foo-bars Read foo bars write:foo-bars Write foo bars read:foo\_baz Read foo baz write:foo\_baz Writ… --- ## [Consent promt confusion](https://community.auth0.com/t/consent-promt-confusion/56302)
**Author:** [@carolus](https://community.auth0.com/u/carolus)\ **Replies:** 3\ **Last updated:** [January 20, 2021, 5:28pm UTC](https://community.auth0.com/t/consent-promt-confusion/56302 "2021-01-20T17:28:09Z")
I need some help in understanding how to do this properly. In the documentation I found the following details where the consent prompt can be somehow controlled: Customize New Universal Login Text Prompts You can also … --- ## [When a user's third-party consented access\_token expires](https://community.auth0.com/t/when-a-users-third-party-consented-access-token-expires/55656)
**Author:** [@carolus](https://community.auth0.com/u/carolus)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 6:14pm UTC](https://community.auth0.com/t/when-a-users-third-party-consented-access-token-expires/55656 "2021-01-06T18:14:19Z")
I have this challenge and not sure how to correctly deal with it. We have an application with API, we also have a third party application that needs to access the API on behalf of their users. These third party applicat… --- ## [I wanted to show the policy statement that comes from our application when a user logins in using Auth0](https://community.auth0.com/t/i-wanted-to-show-the-policy-statement-that-comes-from-our-application-when-a-user-logins-in-using-auth0/49710)
**Author:** [@vamsi.vakkalagadda](https://community.auth0.com/u/vamsi.vakkalagadda)\ **Replies:** 22\ **Last updated:** [October 1, 2020, 10:17am UTC](https://community.auth0.com/t/i-wanted-to-show-the-policy-statement-that-comes-from-our-application-when-a-user-logins-in-using-auth0/49710 "2020-10-01T10:17:44Z")
I wanted to show the policy statement that comes from our application when a user logins in using Auth0 aking for consent. How do i acheive it. The user has accepted and the consent is stored. I also want to show this … --- ## [Consent prompt text](https://community.auth0.com/t/consent-prompt-text/48784)
**Author:** [@nalulahawaii](https://community.auth0.com/u/nalulahawaii)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 2:06am UTC](https://community.auth0.com/t/consent-prompt-text/48784 "2020-09-16T02:06:48Z")
Hello, we are testing Auth0 to allow users to login via Facebook and Google. Can we change the text on the consent screen? Currently it shows the following. It would be nice if the text would be a little more plain engli… --- ## [Authorization with prompt=consent AND prompt=login](https://community.auth0.com/t/authorization-with-prompt-consent-and-prompt-login/44644)
**Author:** [@aep](https://community.auth0.com/u/aep)\ **Replies:** 1\ **Last updated:** [June 15, 2020, 5:44pm UTC](https://community.auth0.com/t/authorization-with-prompt-consent-and-prompt-login/44644 "2020-06-15T17:44:41Z")
when calling the /authorize login endpoint to get the login ui, it is possible to pass prompt=login to make sure the user can select out of multiple accounts. it is also possible to pass prompt=constent to ensure the use… --- ## ["Allow Skipping User Consent" setting does not work](https://community.auth0.com/t/allow-skipping-user-consent-setting-does-not-work/41824)
**Author:** [@hagiwaram](https://community.auth0.com/u/hagiwaram)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 11:58am UTC](https://community.auth0.com/t/allow-skipping-user-consent-setting-does-not-work/41824 "2020-04-30T11:58:07Z")
I have turned off the “Allow Skipping User Consent” option in the dashboard, but user consent is skipped. On is of course skipped, but it’s funny that it’s skipped even when it’s off. I don’t think this option is worki… --- ## [Skip user consent when using social connection](https://community.auth0.com/t/skip-user-consent-when-using-social-connection/18061)
**Author:** [@matterdox](https://community.auth0.com/u/matterdox)\ **Replies:** 3\ **Last updated:** [December 4, 2018, 10:12pm UTC](https://community.auth0.com/t/skip-user-consent-when-using-social-connection/18061 "2018-12-04T22:12:25Z")
I have a Single Page Application in Auth0, and I configure it to use Social Connections (Facebook) using my own login page. Is there any way I can skip Auth0’s Consent page after authorizing my Facebook app to get my Fac… --- ## [Consent screen showing up, despite Allow Skipping User Consent](https://community.auth0.com/t/consent-screen-showing-up-despite-allow-skipping-user-consent/17623)
**Author:** [@jedrzej](https://community.auth0.com/u/jedrzej)\ **Replies:** 4\ **Last updated:** [November 6, 2018, 1:22pm UTC](https://community.auth0.com/t/consent-screen-showing-up-despite-allow-skipping-user-consent/17623 "2018-11-06T13:22:18Z")
Hello, I’ve read through the docs and can’t find why I’m getting the consent screen in the following scenario: I’m developing a mobile app using expo and using a browser to authenticate the user. I open the browser po… [Next page](https://community.auth0.com/tag/consent/158.md?match_all_tags=true&page=1&tags%5B%5D=consent)