# \#spa **URL:** https://community.auth0.com/tag/spa/177.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Custom domain - login.us.auth0.com redirectors to tenant.us.auth0.com and fails](https://community.auth0.com/t/custom-domain-login-us-auth0-com-redirectors-to-tenant-us-auth0-com-and-fails/92286)
**Author:** [@btp-john.strickler](https://community.auth0.com/u/btp-john.strickler)\ **Replies:** 1\ **Last updated:** [December 13, 2024, 12:54am UTC](https://community.auth0.com/t/custom-domain-login-us-auth0-com-redirectors-to-tenant-us-auth0-com-and-fails/92286 "2024-12-13T00:54:29Z")
Hi I’m experiencing an issue with custom domains and authenticating through a Vue SPA. Here’s what’s happening: I changed the domain\_name setting in my Vue app to the new custom domain. I logout and reload the SPA so … --- ## [First login after account link fails when using Account Link extension with React](https://community.auth0.com/t/first-login-after-account-link-fails-when-using-account-link-extension-with-react/60452)
**Author:** [@satvir](https://community.auth0.com/u/satvir)\ **Replies:** 1\ **Last updated:** [May 20, 2024, 10:56pm UTC](https://community.auth0.com/t/first-login-after-account-link-fails-when-using-account-link-extension-with-react/60452 "2024-05-20T22:56:27Z")
When the primary account is passwordless and the secondary account is a google social connection: Redirected to our home page, and the url shows as: localhost:3000/error=access\_denied&error\_description=no%20email%20or%… --- ## [Setting up a SPA + API combo with React and .NET Core](https://community.auth0.com/t/setting-up-a-spa-api-combo-with-react-and-net-core/53098)
**Author:** [@pdevito3](https://community.auth0.com/u/pdevito3)\ **Replies:** 2\ **Last updated:** [March 5, 2024, 6:17pm UTC](https://community.auth0.com/t/setting-up-a-spa-api-combo-with-react-and-net-core/53098 "2024-03-05T18:17:19Z")
So I’m looking into Auth0 as the foundation for a few of my projects and I’m pretty sure I know how I want to set it up, but I’m having trouble finding resources on what to do for Auth0. For context, I have a react app … --- ## [Signout operation not signing out completely](https://community.auth0.com/t/signout-operation-not-signing-out-completely/96108)
**Author:** [@krishnas](https://community.auth0.com/u/krishnas)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 11:38pm UTC](https://community.auth0.com/t/signout-operation-not-signing-out-completely/96108 "2022-12-14T23:38:05Z")
The signon operation is working fine, however we have some issues with out logout operation. The workflow of signin and signout operation is as follows User navigate to a page appUrl/external-login. It redirects the u… --- ## [Getting Management API Access Tokens for SPAs](https://community.auth0.com/t/getting-management-api-access-tokens-for-spas/94734)
**Author:** [@liam-ssg](https://community.auth0.com/u/liam-ssg)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 9:41am UTC](https://community.auth0.com/t/getting-management-api-access-tokens-for-spas/94734 "2022-11-21T09:41:58Z")
Here’s what I’m trying to do: Authenticate with Google to sign-in (done). I can get the user profile using auth0-spa-js, and that works. Get the Access Token that was issued by Google in my SPA. I think I’ll need the m… --- ## [Auth0 scope with Angular application](https://community.auth0.com/t/auth0-scope-with-angular-application/89570)
**Author:** [@Jaydeeps03](https://community.auth0.com/u/Jaydeeps03)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 5:47pm UTC](https://community.auth0.com/t/auth0-scope-with-angular-application/89570 "2022-09-12T17:47:53Z")
Hi Team, I am exploring Auth0 SDK for angular application. I have created one SPA and API with ‘Machine to Machine’ configuration. I have added couple of scopes in API and same are allowed from SPA application from auth… --- ## [Expo Implementation. Invalid access\_token](https://community.auth0.com/t/expo-implementation-invalid-access-token/90204)
**Author:** [@forestman27](https://community.auth0.com/u/forestman27)\ **Replies:** 1\ **Last updated:** [September 9, 2022, 1:09am UTC](https://community.auth0.com/t/expo-implementation-invalid-access-token/90204 "2022-09-09T01:09:36Z")
The id\_token I get back seems to be working great. I can decode it or send it to my api however I believe using it in the authorization header is a bad practice. The problem is the access\_token I get back is invalid. I… --- ## [getAccessTokenSilently Auth0 Session TTL](https://community.auth0.com/t/getaccesstokensilently-auth0-session-ttl/89219)
**Author:** [@joe.a](https://community.auth0.com/u/joe.a)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 5:53am UTC](https://community.auth0.com/t/getaccesstokensilently-auth0-session-ttl/89219 "2022-08-23T05:53:13Z")
The function getAccessTokenSilently has the option to ignoreCache https://auth0.github.io/auth0-spa-js/interfaces/gettokensilentlyoptions.html#ignorecache What is the TTL of this cache on the auth0 side, and is there a… --- ## [Access user permissions array in user token](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024)
**Author:** [@tkiddle](https://community.auth0.com/u/tkiddle)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 6:08pm UTC](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024 "2022-05-06T18:08:11Z")
Why on earth is it so difficult to access a user’s “permissions” from within a react application? I have a single-page application, and my user has some roles and permissions attached to it. I can create a custom rule … --- ## [Refresh React useAuth0 user after API user data update](https://community.auth0.com/t/refresh-react-useauth0-user-after-api-user-data-update/80030)
**Author:** [@MamorukunBE](https://community.auth0.com/u/MamorukunBE)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 10:47am UTC](https://community.auth0.com/t/refresh-react-useauth0-user-after-api-user-data-update/80030 "2022-03-31T10:47:44Z")
Hello from Belgium. I have a web React application accessing users data through useAuth0 hook (from npm auth0-react package). In the profile page, I permit the connected user to change his profile picture. The new pictur… --- ## [Auth0, React and Single-Spa - \[You forgot to wrap your component in \\]](https://community.auth0.com/t/auth0-react-and-single-spa-you-forgot-to-wrap-your-component-in-auth0provider/77731)
**Author:** [@natasha-b](https://community.auth0.com/u/natasha-b)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 2:22pm UTC](https://community.auth0.com/t/auth0-react-and-single-spa-you-forgot-to-wrap-your-component-in-auth0provider/77731 "2022-02-22T14:22:52Z")
I am creating an app using Single-Spa, React and Auth0. The auth0/auth0-react documentation specifies to wrap the app in the following way: \ **Author:** [@salomonjc](https://community.auth0.com/u/salomonjc)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 12:11pm UTC](https://community.auth0.com/t/how-can-i-automate-the-recovery-of-a-code-for-automated-tests/78438 "2022-02-17T12:11:15Z") Hi, I have been commissioned to automate a website with Auth0 authentication (Authorization Code Flow). I have researched that it uses PKCE and SPA. I was checking that it sends the following variables: auth0Client, co… --- ## [/userinfo dj-rest-auth](https://community.auth0.com/t/userinfo-dj-rest-auth/76545)
**Author:** [@dhruvsingh](https://community.auth0.com/u/dhruvsingh)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 9:37pm UTC](https://community.auth0.com/t/userinfo-dj-rest-auth/76545 "2022-01-20T21:37:49Z")
I’m trying to integrate Auth0 with dj-rest-auth which is built on top of all-auth. I correctly set the settings on Django Rest Framework side, but I’m unsure about: What should the url for AUTH0\_URL be? Is it the same… --- ## [SPA/API and getting user information on the server](https://community.auth0.com/t/spa-api-and-getting-user-information-on-the-server/76396)
**Author:** [@martin.d.weel](https://community.auth0.com/u/martin.d.weel)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 6:56pm UTC](https://community.auth0.com/t/spa-api-and-getting-user-information-on-the-server/76396 "2022-01-14T18:56:38Z")
My environment includes a Vue JS front end and Dotnet Core backend. I am using the Auth0 Spa SDK. I can login and get an access token, view the user information, etc on the client. However, I want to create a new user… --- ## [SPA - authenticate user with password grant type](https://community.auth0.com/t/spa-authenticate-user-with-password-grant-type/68957)
**Author:** [@katerina.chinnappan](https://community.auth0.com/u/katerina.chinnappan)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 11:14am UTC](https://community.auth0.com/t/spa-authenticate-user-with-password-grant-type/68957 "2021-09-02T11:14:05Z")
I have an SPA registered in auth0 and connection enabled for username/password DB. I have the scenario when users wish to update their passwords, they first have to enter their current password and that is validated in … --- ## [Account Linking with Auth0-spa-js](https://community.auth0.com/t/account-linking-with-auth0-spa-js/67042)
**Author:** [@nick.weinandt](https://community.auth0.com/u/nick.weinandt)\ **Replies:** 1\ **Last updated:** [July 30, 2021, 3:36pm UTC](https://community.auth0.com/t/account-linking-with-auth0-spa-js/67042 "2021-07-30T15:36:40Z")
There seems to be an example of account linking using auth0-spa.js: auth0-link-accounts-sample/SPA at master · auth0-samples/auth0-link-accounts-sample · GitHub but according to this page: Migrate from Auth0.js to the A… --- ## [Control expires\_in value for SPA](https://community.auth0.com/t/control-expires-in-value-for-spa/66178)
**Author:** [@Gratus-BenchSci](https://community.auth0.com/u/Gratus-BenchSci)\ **Replies:** 5\ **Last updated:** [July 15, 2021, 4:38pm UTC](https://community.auth0.com/t/control-expires-in-value-for-spa/66178 "2021-07-15T16:38:51Z")
I am using the universal login with an SPA set up - I am getting the following in my response after a success: #access\_token=xxxx&scope=openid%20email&expires\_in=7200&token\_type=Bearer&state=MDQkAvqN1rlY0w1yCcn9XX1f88yp… --- ## [Connect API to SPA Application](https://community.auth0.com/t/connect-api-to-spa-application/63737)
**Author:** [@liam\_adams](https://community.auth0.com/u/liam_adams)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 4:56pm UTC](https://community.auth0.com/t/connect-api-to-spa-application/63737 "2021-06-03T16:56:46Z")
I have a System Management API with all scopes with an audience https://audience/api/v2 that has the scopes. I also have an SPA with clientId and clientSecret. I want to use this API (or any API) to add/delete users in m… --- ## [Is it secure to embed SPA in iframe?](https://community.auth0.com/t/is-it-secure-to-embed-spa-in-iframe/61380)
**Author:** [@msiracusa](https://community.auth0.com/u/msiracusa)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 8:55am UTC](https://community.auth0.com/t/is-it-secure-to-embed-spa-in-iframe/61380 "2021-05-11T08:55:36Z")
Hi all I have an application that is using Auth0 to authenticate users. Now I would like that any third party sites can embed my application in an iframe so that they can use the services from my app. I’m not sure abou… --- ## [withAuthenticationRequires returns user to another route after page refresh](https://community.auth0.com/t/withauthenticationrequires-returns-user-to-another-route-after-page-refresh/62227)
**Author:** [@AlperenOzturk](https://community.auth0.com/u/AlperenOzturk)\ **Replies:** 3\ **Last updated:** [May 6, 2021, 3:17pm UTC](https://community.auth0.com/t/withauthenticationrequires-returns-user-to-another-route-after-page-refresh/62227 "2021-05-06T15:17:06Z")
Hey there, I’m having an issue with the withAuthenticationRequired HOC. If I refresh a ProtectedRoute page it returns me to redirectUri page even if I declare the returnTo parameter. Here is a quick summary of my code: … --- ## [How to get Management API accessToken silently while SPA was already configured for a custom API?](https://community.auth0.com/t/how-to-get-management-api-accesstoken-silently-while-spa-was-already-configured-for-a-custom-api/62081)
**Author:** [@AlperenOzturk](https://community.auth0.com/u/AlperenOzturk)\ **Replies:** 4\ **Last updated:** [May 4, 2021, 4:24pm UTC](https://community.auth0.com/t/how-to-get-management-api-accesstoken-silently-while-spa-was-already-configured-for-a-custom-api/62081 "2021-05-04T16:24:40Z")
Hey there, I am using React.js and the @auth0/auth0-react SDK. I have a custom backend API. So my Auth0Provider component is configured with the audience of that custom API. However i also want the user to able to upda… --- ## [Is verifying a JWT Access Token enough for custom API access?](https://community.auth0.com/t/is-verifying-a-jwt-access-token-enough-for-custom-api-access/57575)
**Author:** [@iltimas.doha](https://community.auth0.com/u/iltimas.doha)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 10:57pm UTC](https://community.auth0.com/t/is-verifying-a-jwt-access-token-enough-for-custom-api-access/57575 "2021-02-10T22:57:09Z")
Is verifying a JWT Access Token enough for custom API access? Or do I need to hit somesort of Auth0 endpoint to ensure the access token is valid? If the backend JWT verifier confirms the signature and the form of JWT, do… --- ## [How to get Sub Claim from Access Token](https://community.auth0.com/t/how-to-get-sub-claim-from-access-token/57499)
**Author:** [@iltimas.doha](https://community.auth0.com/u/iltimas.doha)\ **Replies:** 7\ **Last updated:** [February 10, 2021, 2:45pm UTC](https://community.auth0.com/t/how-to-get-sub-claim-from-access-token/57499 "2021-02-10T14:45:29Z")
Hello, tl;dr I would like to understand how I can extract the User Sub claim from an Access Token. Context: We’re building an SPA that exclusively uses serverless function (from Vercel) to make authenticated calls to … --- ## [Can I get a long-lived refresh token for a Cordova/Ionic app using Auth0?](https://community.auth0.com/t/can-i-get-a-long-lived-refresh-token-for-a-cordova-ionic-app-using-auth0/50845)
**Author:** [@kazlauskis](https://community.auth0.com/u/kazlauskis)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 6:55pm UTC](https://community.auth0.com/t/can-i-get-a-long-lived-refresh-token-for-a-cordova-ionic-app-using-auth0/50845 "2020-11-20T18:55:14Z")
It works well when using rotating refresh tokens but the problem is that the user would potentially have to re-login every 90 days (max expiry for rotating tokens). Implementing Authorization Code Flow (PKCE) in a Cordo… --- ## [Reading Token from LocalStorage for E2E Use Case](https://community.auth0.com/t/reading-token-from-localstorage-for-e2e-use-case/53421)
**Author:** [@benny.powers.aqovia](https://community.auth0.com/u/benny.powers.aqovia)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 8:07am UTC](https://community.auth0.com/t/reading-token-from-localstorage-for-e2e-use-case/53421 "2020-11-18T08:07:06Z")
Hey there, Say you’ve got an SPA that uses @auth0/auth0-spa-js. The token is ordinarily stored in memory as a JavaScript variable, and updated with getTokenSilently as needed. let cachedToken; export function authoriz… --- ## [Invalid state on reload Auth0 callback url, using auth0-spa-js and Angular 8](https://community.auth0.com/t/invalid-state-on-reload-auth0-callback-url-using-auth0-spa-js-and-angular-8/36469)
**Author:** [@mads1](https://community.auth0.com/u/mads1)\ **Replies:** 7\ **Last updated:** [September 20, 2020, 4:49pm UTC](https://community.auth0.com/t/invalid-state-on-reload-auth0-callback-url-using-auth0-spa-js-and-angular-8/36469 "2020-09-20T16:49:32Z")
Hi We are using the auth0-spa-js in our Angular 8 project, the authentication procedure follows the start-up guide from Auth0 Quickstart. The login seems to work fine, but we receive an ‘Invalid state’ error from our us… --- ## [Custom Scope/Permission in Access Token from SPA (ReactJS)](https://community.auth0.com/t/custom-scope-permission-in-access-token-from-spa-reactjs/49663)
**Author:** [@buzzpod](https://community.auth0.com/u/buzzpod)\ **Replies:** 1\ **Last updated:** [September 13, 2020, 10:56pm UTC](https://community.auth0.com/t/custom-scope-permission-in-access-token-from-spa-reactjs/49663 "2020-09-13T22:56:28Z")
I have setup a ReactJS SPA with a Python Flask backend. Both are registered via the auth0 dashboard and I was succesfully able to have a user login and authenticate with auth0 then request an access token from auth0 in o… --- ## [Authenticate only once to multiple clients](https://community.auth0.com/t/authenticate-only-once-to-multiple-clients/48321)
**Author:** [@LeoSlr](https://community.auth0.com/u/LeoSlr)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 1:59pm UTC](https://community.auth0.com/t/authenticate-only-once-to-multiple-clients/48321 "2020-08-20T13:59:40Z")
Hi, I am currently using Auth0 in order to authenticate users to a SPA and to allow them to make calls to an API. In order to improve the solution I want users to be able to write/read secrets stored in a Vault (Hashic… --- ## [SPA & Refresh Token](https://community.auth0.com/t/spa-refresh-token/42789)
**Author:** [@dedicatedmanagers](https://community.auth0.com/u/dedicatedmanagers)\ **Replies:** 3\ **Last updated:** [May 12, 2020, 8:44pm UTC](https://community.auth0.com/t/spa-refresh-token/42789 "2020-05-12T20:44:58Z")
In the post How does auth0-spa-js store tokens, @mathiasconradt a Sr. Solutions Engineer for Auth0 writes: There’s never a refresh token in a SPA scenario. Yet there’s a knowledge article on Auth0 about using Refres… --- ## [Editing user data (first/last name) in SPA forces re-login on refresh](https://community.auth0.com/t/editing-user-data-first-last-name-in-spa-forces-re-login-on-refresh/41033)
**Author:** [@benjaminwfox](https://community.auth0.com/u/benjaminwfox)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 7:41am UTC](https://community.auth0.com/t/editing-user-data-first-last-name-in-spa-forces-re-login-on-refresh/41033 "2020-04-16T07:41:39Z")
I have a SPA with some custom user-management (via the Auth0 management api) functionality. The logged-in user (via Username-Password-Authentication connection) can edit their own first or last name (SPA makes calls to … [Next page](https://community.auth0.com/tag/spa/177.md?match_all_tags=true&page=1&tags%5B%5D=spa)