# \#sessions **URL:** https://community.auth0.com/tag/sessions/1294.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [How to do e2e testing without cacheLocation="memory"?](https://community.auth0.com/t/how-to-do-e2e-testing-without-cachelocation-memory/198982)
**Author:** [@alex57](https://community.auth0.com/u/alex57)\ **Replies:** 4\ **Last updated:** [September 15, 2026, 7:43pm UTC](https://community.auth0.com/t/how-to-do-e2e-testing-without-cachelocation-memory/198982 "2026-09-15T19:43:29Z")
Hello, I’m setting up Playwright end-to-end tests for our React SPA that uses @auth0/auth0-react. I’d like to keep cacheLocation on the recommended default (“memory”) per your token storage guidance ( Token Storage - Au… --- ## [Running into 'invalid\_grant' issues with MRRT](https://community.auth0.com/t/running-into-invalid-grant-issues-with-mrrt/201738)
**Author:** [@robin.martin](https://community.auth0.com/u/robin.martin)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 6:45pm UTC](https://community.auth0.com/t/running-into-invalid-grant-issues-with-mrrt/201738 "2026-08-31T18:45:21Z")
I added a github issue, but not sure if it’s better to ask here as well. I noticed the auth0-spa-js lib doesn’t properly rotate refresh tokens with MRRT if the requests are sent in parallel since the lock on getSilentTo… --- ## [Call protected controller from serverprerendered blazor component](https://community.auth0.com/t/call-protected-controller-from-serverprerendered-blazor-component/201076)
**Author:** [@planyway](https://community.auth0.com/u/planyway)\ **Replies:** 1\ **Last updated:** [June 24, 2026, 12:11am UTC](https://community.auth0.com/t/call-protected-controller-from-serverprerendered-blazor-component/201076 "2026-06-24T00:11:26Z")
I have a .net core MVC application that has a serverprerendered blazor component. It uses auth0’s refreshing tokens. Someone online suggests getting the token in razor view and pass it to blazor as a parameter. But how t… --- ## [Seeing \`invalid signature: the signature value\`...\`is incorrect\`](https://community.auth0.com/t/seeing-invalid-signature-the-signature-value-is-incorrect/200750)
**Author:** [@jsoref](https://community.auth0.com/u/jsoref)\ **Replies:** 1\ **Last updated:** [June 12, 2026, 12:38am UTC](https://community.auth0.com/t/seeing-invalid-signature-the-signature-value-is-incorrect/200750 "2026-06-12T00:38:21Z")
We ran across: { "date": "2026-06-11T05:50:14.771Z", "type": "flo", "description": "invalid signature: the signature value ...== is incorrect", "connection\_id": "", "client\_id": "...", "client\_name": "...", … --- ## [Unknown or invalid refresh token on Android and iOS](https://community.auth0.com/t/unknown-or-invalid-refresh-token-on-android-and-ios/196812)
**Author:** [@Arthur\_Dent](https://community.auth0.com/u/Arthur_Dent)\ **Replies:** 8\ **Last updated:** [June 5, 2026, 7:00pm UTC](https://community.auth0.com/t/unknown-or-invalid-refresh-token-on-android-and-ios/196812 "2026-06-05T19:00:30Z")
Greetings, Our team is facing some problems with auth0 in mobile apps (both, Android and iOS). We have looked through a lot of topics here but couldn’t find answers to our questions. The problem we’re facing is auth0 r… --- ## [Athorization stopped saving and started asking consent on localhost](https://community.auth0.com/t/athorization-stopped-saving-and-started-asking-consent-on-localhost/200046)
**Author:** [@yaroslavtereshchuk](https://community.auth0.com/u/yaroslavtereshchuk)\ **Replies:** 5\ **Last updated:** [May 20, 2026, 8:20pm UTC](https://community.auth0.com/t/athorization-stopped-saving-and-started-asking-consent-on-localhost/200046 "2026-05-20T20:20:51Z")
Hi, after the weekend, my website on the localhost started requesting “\*\*\* Client is requesting access to your dev-\*\*\* account", and it stopped saving the session and started asking to log in on every page reload. What … --- ## [Selecting a specific connected account when using Auth0 Token Vault token exchange](https://community.auth0.com/t/selecting-a-specific-connected-account-when-using-auth0-token-vault-token-exchange/196897)
**Author:** [@laszlo.kovacs](https://community.auth0.com/u/laszlo.kovacs)\ **Replies:** 7\ **Last updated:** [March 18, 2026, 6:20pm UTC](https://community.auth0.com/t/selecting-a-specific-connected-account-when-using-auth0-token-vault-token-exchange/196897 "2026-03-18T18:20:59Z")
Hi everyone :waving\_hand:, We’ve run into a question while using Auth0 Token Vault and were hoping the community could help clarify what’s possible here. Context We’re using the Token Vault token exchange flow to excha… --- ## [completeInteractiveLogin return value — user, session, and idToken not present (auth0-nuxt)](https://community.auth0.com/t/completeinteractivelogin-return-value-user-session-and-idtoken-not-present-auth0-nuxt/197825)
**Author:** [@aleksandra](https://community.auth0.com/u/aleksandra)\ **Replies:** 3\ **Last updated:** [March 11, 2026, 9:15pm UTC](https://community.auth0.com/t/completeinteractivelogin-return-value-user-session-and-idtoken-not-present-auth0-nuxt/197825 "2026-03-11T21:15:19Z")
Hi, I’m following up on a previous thread about accessing user data in the Auth0 callback when using auth0-nuxt: Auth0-nuxt and access to the user data in callback - #3 by remus.ivan I’ve tried the suggested approaches… --- ## [Keep users logged in for a month or more using token rotation in cloud-based next.js webapps](https://community.auth0.com/t/keep-users-logged-in-for-a-month-or-more-using-token-rotation-in-cloud-based-next-js-webapps/197504)
**Author:** [@philipbattle](https://community.auth0.com/u/philipbattle)\ **Replies:** 4\ **Last updated:** [March 3, 2026, 3:59pm UTC](https://community.auth0.com/t/keep-users-logged-in-for-a-month-or-more-using-token-rotation-in-cloud-based-next-js-webapps/197504 "2026-03-03T15:59:47Z")
Usingreact-native-auth0 with “Allow Refresh Token Rotation” enabled, our app allows users to stay logged in for the “Maximum Refresh Token Lifetime” which we have set to a year. We call getCredentials() to get the access… --- ## [SPA: custom domain + silent auth vs refresh tokens + rotation](https://community.auth0.com/t/spa-custom-domain-silent-auth-vs-refresh-tokens-rotation/197360)
**Author:** [@chris\_b](https://community.auth0.com/u/chris_b)\ **Replies:** 3\ **Last updated:** [February 19, 2026, 7:43pm UTC](https://community.auth0.com/t/spa-custom-domain-silent-auth-vs-refresh-tokens-rotation/197360 "2026-02-19T19:43:09Z")
Hi all, we have auth0 tenants with custom domains (auth.product.com) and a spa (web.product.com) which talks to our spring api. Is there a general recommendation what mechanism we should use? Cookies + Silent-Auth vs. … --- ## [Session Idle Timeout and Access Token Interactions](https://community.auth0.com/t/session-idle-timeout-and-access-token-interactions/197281)
**Author:** [@ptidwell](https://community.auth0.com/u/ptidwell)\ **Replies:** 2\ **Last updated:** [February 17, 2026, 4:43pm UTC](https://community.auth0.com/t/session-idle-timeout-and-access-token-interactions/197281 "2026-02-17T16:43:52Z")
I want to double check my understanding of how session idle timeout works. Using the api.session.setIdleExpiresAt to expire in 15 minutes, my session is correctly terminated if the SPA app requests a new access token af… --- ## [Auth0-nuxt and access to the user data in callback](https://community.auth0.com/t/auth0-nuxt-and-access-to-the-user-data-in-callback/196759)
**Author:** [@aleksandra](https://community.auth0.com/u/aleksandra)\ **Replies:** 1\ **Last updated:** [January 30, 2026, 4:40pm UTC](https://community.auth0.com/t/auth0-nuxt-and-access-to-the-user-data-in-callback/196759 "2026-01-30T16:40:07Z")
Hi there, I am starting implementation with the new SDK for Nuxt applications (auth0-nuxt). I am creating server routes: login and callback, but I would like to know if during login it is possible to obtain an email and… --- ## [Refused to display 'https://auth.priz.guru/' in a frame because it set 'X-Frame-Options' to 'sameorigin'](https://community.auth0.com/t/refused-to-display-https-auth-priz-guru-in-a-frame-because-it-set-x-frame-options-to-sameorigin/195103)
**Author:** [@shurika](https://community.auth0.com/u/shurika)\ **Replies:** 1\ **Last updated:** [December 2, 2025, 4:57am UTC](https://community.auth0.com/t/refused-to-display-https-auth-priz-guru-in-a-frame-because-it-set-x-frame-options-to-sameorigin/195103 "2025-12-02T04:57:03Z")
Hi all, We have been using the custom login pages through Auth0 for a while now; however, lately, the token renewal has started failing. What we should uncover is that most likely our Content-Security-policy was not s… --- ## [React Router v7 template](https://community.auth0.com/t/react-router-v7-template/194484)
**Author:** [@alessandro.vitali](https://community.auth0.com/u/alessandro.vitali)\ **Replies:** 2\ **Last updated:** [December 2, 2025, 2:04am UTC](https://community.auth0.com/t/react-router-v7-template/194484 "2025-12-02T02:04:17Z")
Hi, it looks like there is no React Router v7 template/example right now, but it should have been in the Q1 backlog based on past response I found in a closed post. Is there any update? --- ## [Session Lifetime Limit — Max 3 Days? How to Configure for Longer Sessions](https://community.auth0.com/t/session-lifetime-limit-max-3-days-how-to-configure-for-longer-sessions/195014)
**Author:** [@chenchang.lew](https://community.auth0.com/u/chenchang.lew)\ **Replies:** 1\ **Last updated:** [November 28, 2025, 7:12pm UTC](https://community.auth0.com/t/session-lifetime-limit-max-3-days-how-to-configure-for-longer-sessions/195014 "2025-11-28T19:12:35Z")
We are trying to configure longer login persistence in our production tenant and have run into a limitation. Specifically, we want to set: Idle Session Lifetime (Persistent) → ~12 weeks Maximum Session Lifetime (P… --- ## [In Next.js auth0.getAccessToken behaves differently in pages router and app router](https://community.auth0.com/t/in-next-js-auth0-getaccesstoken-behaves-differently-in-pages-router-and-app-router/194035)
**Author:** [@radim-kafka](https://community.auth0.com/u/radim-kafka)\ **Replies:** 1\ **Last updated:** [November 18, 2025, 4:53pm UTC](https://community.auth0.com/t/in-next-js-auth0-getaccesstoken-behaves-differently-in-pages-router-and-app-router/194035 "2025-11-18T16:53:17Z")
Hello, I have two versions of the same endpoint one for the PagesRouter (I am currently using in the app) and one for the AppRouter. The endpoint contains only auth0.getAccessToken with refresh: true. I have Test compo… --- ## [Check if user is authenticated from an external marketing website (webflow)](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417)
**Author:** [@ac831](https://community.auth0.com/u/ac831)\ **Replies:** 1\ **Last updated:** [November 14, 2025, 7:18pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417 "2025-11-14T19:18:58Z")
We use auth0 for login to our production saas app, located on app . example . com We have a marketing website at example . com which was built on Webflow. I’m wondering if there is any best practice or light front end … --- ## [My Nextjs application using the same access token twice](https://community.auth0.com/t/my-nextjs-application-using-the-same-access-token-twice/193662)
**Author:** [@huzaifa.murtaza](https://community.auth0.com/u/huzaifa.murtaza)\ **Replies:** 2\ **Last updated:** [November 14, 2025, 5:46pm UTC](https://community.auth0.com/t/my-nextjs-application-using-the-same-access-token-twice/193662 "2025-11-14T17:46:59Z")
My auth0.ts file import { isPlatform } from ‘@/constants’; import { platformApps } from ‘@/constants/enums/enums’; import { Auth0Client } from ‘ /nextjs-auth0/server’; import { NextResponse } from ‘next/server’; expor… --- ## [Next.js SDK v4 — how to correctly extend/roll app session expiry (idle 30m, absolute 8h)](https://community.auth0.com/t/next-js-sdk-v4-how-to-correctly-extend-roll-app-session-expiry-idle-30m-absolute-8h/191893)
**Author:** [@akshay3](https://community.auth0.com/u/akshay3)\ **Replies:** 6\ **Last updated:** [November 12, 2025, 6:44pm UTC](https://community.auth0.com/t/next-js-sdk-v4-how-to-correctly-extend-roll-app-session-expiry-idle-30m-absolute-8h/191893 "2025-11-12T18:44:36Z")
Hi, Right now my session is expiring right after inactivityDuration: 30 \* 60 (30 minutes). I want the session to automatically extend on user activity (e.g., API calls, page navigation) but still enforce an absolute max… --- ## [Sessions and Refresh Tokens](https://community.auth0.com/t/sessions-and-refresh-tokens/194346)
**Author:** [@nik.baleca](https://community.auth0.com/u/nik.baleca)\ **Replies:** 0\ **Last updated:** [November 11, 2025, 8:46pm UTC](https://community.auth0.com/t/sessions-and-refresh-tokens/194346 "2025-11-11T20:46:14Z")
Hello developers! :waving\_hand: Today I am back to provide some insight in regards to how Auth0 Sessions work and some guides/information on Refresh Tokens and to correctly use them within specific SDKs or configurations… --- ## [I'm facing an issue with my Vue.js app — when I refresh the page in the Safari browser, it logs me out even though I'm logged in.](https://community.auth0.com/t/im-facing-an-issue-with-my-vue-js-app-when-i-refresh-the-page-in-the-safari-browser-it-logs-me-out-even-though-im-logged-in/193681)
**Author:** [@theumarrasheed](https://community.auth0.com/u/theumarrasheed)\ **Replies:** 1\ **Last updated:** [October 27, 2025, 4:36pm UTC](https://community.auth0.com/t/im-facing-an-issue-with-my-vue-js-app-when-i-refresh-the-page-in-the-safari-browser-it-logs-me-out-even-though-im-logged-in/193681 "2025-10-27T16:36:11Z")
I’m facing an issue with my Vue.js app — when I refresh the page in the Safari browser, it logs me out even though I’m logged in. --- ## [Can't authenticate user on Next v15 API Route Handler, can't getSession or updateSession from auth0 client](https://community.auth0.com/t/cant-authenticate-user-on-next-v15-api-route-handler-cant-getsession-or-updatesession-from-auth0-client/193586)
**Author:** [@Piotr.Lenartowicz](https://community.auth0.com/u/Piotr.Lenartowicz)\ **Replies:** 4\ **Last updated:** [October 27, 2025, 2:57pm UTC](https://community.auth0.com/t/cant-authenticate-user-on-next-v15-api-route-handler-cant-getsession-or-updatesession-from-auth0-client/193586 "2025-10-27T14:57:52Z")
I’m upgrading from NextJs 14 to 15. In 15 I cannot use auth0.updateSession() method in Server Action (Server Function) not triggered by Form, event handler or useEffect hook. I got Server Function defined which I invoke… --- ## [Next.js + Auth0 implementation with Session Management](https://community.auth0.com/t/next-js-auth0-implementation-with-session-management/192481)
**Author:** [@hwng](https://community.auth0.com/u/hwng)\ **Replies:** 2\ **Last updated:** [October 21, 2025, 10:16pm UTC](https://community.auth0.com/t/next-js-auth0-implementation-with-session-management/192481 "2025-10-21T22:16:07Z")
Setup Hi there, I am currently developing a web application for our team’s project that is currently using Auth0 as the authentication system. Our technology stack includes: Next.js, React + TypeScript, and using Node.js… --- ## [The user is logged out after one hour despite the use refresh tokens](https://community.auth0.com/t/the-user-is-logged-out-after-one-hour-despite-the-use-refresh-tokens/193298)
**Author:** [@Alex.the.seal](https://community.auth0.com/u/Alex.the.seal)\ **Replies:** 1\ **Last updated:** [October 17, 2025, 5:49pm UTC](https://community.auth0.com/t/the-user-is-logged-out-after-one-hour-despite-the-use-refresh-tokens/193298 "2025-10-17T17:49:22Z")
We’re seeing users get disconnected after roughly one hour, even though we use refresh tokens every 10 minutes. To meet security standards, we enabled refresh token rotation. Our assumption was that refresh tokens coul… --- ## [Session Expiry Issues After Upgrading to nextjs-auth0 v4](https://community.auth0.com/t/session-expiry-issues-after-upgrading-to-nextjs-auth0-v4/192984)
**Author:** [@apps.oh](https://community.auth0.com/u/apps.oh)\ **Replies:** 3\ **Last updated:** [October 15, 2025, 6:37pm UTC](https://community.auth0.com/t/session-expiry-issues-after-upgrading-to-nextjs-auth0-v4/192984 "2025-10-15T18:37:15Z")
We are currently upgrading our project from nextjs-auth0 v3 to v4 and have encountered some issues in our production environment. In our development and staging environments (both connected to the Auth0 sandbox), the up… --- ## [Auth0 refresh\_token exchange fails (“Invalid URL” / UnexpectedResponseError) with Remix Auth OAuth2Strategy](https://community.auth0.com/t/auth0-refresh-token-exchange-fails-invalid-url-unexpectedresponseerror-with-remix-auth-oauth2strategy/192895)
**Author:** [@anna.jacobsen](https://community.auth0.com/u/anna.jacobsen)\ **Replies:** 5\ **Last updated:** [October 10, 2025, 4:43pm UTC](https://community.auth0.com/t/auth0-refresh-token-exchange-fails-invalid-url-unexpectedresponseerror-with-remix-auth-oauth2strategy/192895 "2025-10-10T16:43:37Z")
I have a React Remix application, and I am trying to handle refreshing access tokens when they have expired. I have activated offline\_access and the OAuth2 strategy should be configured correctly. First i tried to use t… --- ## [Title: ASWebAuthenticationSession fails when Chrome is open & Safari is closed → Scheme '(null)' is not valid as per RFC 3986](https://community.auth0.com/t/title-aswebauthenticationsession-fails-when-chrome-is-open-safari-is-closed-scheme-null-is-not-valid-as-per-rfc-3986/192238)
**Author:** [@lam1310](https://community.auth0.com/u/lam1310)\ **Replies:** 1\ **Last updated:** [September 25, 2025, 3:56pm UTC](https://community.auth0.com/t/title-aswebauthenticationsession-fails-when-chrome-is-open-safari-is-closed-scheme-null-is-not-valid-as-per-rfc-3986/192238 "2025-09-25T15:56:46Z")
Environment App: Flutter desktop (macOS primary; Windows/Linux also used) SDK/Packages: auth0\_flutter Platforms: macOS, Windows/Linux unaffected Browser state: Chrome open, Safari closed (Chrome default) S… --- ## [Android SDK - User still logged in after uninstalling and installing the app](https://community.auth0.com/t/android-sdk-user-still-logged-in-after-uninstalling-and-installing-the-app/191747)
**Author:** [@oleksandrpriadko](https://community.auth0.com/u/oleksandrpriadko)\ **Replies:** 6\ **Last updated:** [September 19, 2025, 7:25am UTC](https://community.auth0.com/t/android-sdk-user-still-logged-in-after-uninstalling-and-installing-the-app/191747 "2025-09-19T07:25:12Z")
Hey folks, I know that simple uninstalling of Android app does not clear user credentials because of cookies in CustomChromeTabs. BUT I see that ChatGPT app on Android and their Android app does not store user credent… --- ## [A CORS error appears in the console](https://community.auth0.com/t/a-cors-error-appears-in-the-console/191511)
**Author:** [@MSK1116](https://community.auth0.com/u/MSK1116)\ **Replies:** 3\ **Last updated:** [September 16, 2025, 3:13pm UTC](https://community.auth0.com/t/a-cors-error-appears-in-the-console/191511 "2025-09-16T15:13:18Z")
// \\frontend\\src\\app\\chat\\\[...slug\]\\page.jsx import { notFound, redirect } from "next/navigation"; import mongoDbCreateUser from "@/lib/mongoDbCreateUser"; import ChatWrapper from "@/app/chat/\[...slug\]/ChatWrapper"; impo… --- ## [Refresh token best practices](https://community.auth0.com/t/refresh-token-best-practices/191805)
**Author:** [@bryceb](https://community.auth0.com/u/bryceb)\ **Replies:** 1\ **Last updated:** [September 12, 2025, 7:11pm UTC](https://community.auth0.com/t/refresh-token-best-practices/191805 "2025-09-12T19:11:37Z")
Hello. Our application uses the Auth0 SPA SDK for authentication and validation when calling an API. Our refresh token configuration is as follows: Maximum ID Token lifetime: 7200 seconds Idle refresh token lifetime: … [Next page](https://community.auth0.com/tag/sessions/1294.md?match_all_tags=true&page=1&tags%5B%5D=sessions)