Open cutesweetpudding opened 4 months ago
Same issue over here, not sure what's going on. Tried changing to links as instructed here, but that didn't help. I'm running this on an AWS stack and Cloudfront.
Might be related to https://github.com/auth0/nextjs-auth0/issues/42?
Same issue here. Using Azure static website.
From my part, it looks like this is related to the cache policy in my Cloudfront.
I've deployed using SST and the NextJs construct.
I found a fix for this issue in my stack. Since Auth0 uses Cookies for authentication, I had to explicitly set cookieBehavior: CacheCookieBehavior.all()
(default it is set to none
). Spent a long time looking for this solution, I hope this helps someone else.
Below is the full code:
const nextJsSite = new NextjsSite(stack, "next-js-site", {
path: "packages/web",
cdk: {
// By default, the cache policy is configured to cache all responses from
// the server rendering Lambda based on the query-key only. If you're using
// cookie or header based authentication, you need to override the
// cache policy to cache based on those values as well.
serverCachePolicy: new CachePolicy(stack, "ServerCache", {
queryStringBehavior: CacheQueryStringBehavior.all(),
// The headers below are set by the SST construct so adding this as well
headerBehavior: CacheHeaderBehavior.allowList(
"accept",
"rsc",
"next-router-prefetch",
"next-router-state-tree",
"next-url",
"x-prerender-bypass",
"x-prerender-revalidate",
),
// The line below solved my problem
cookieBehavior: CacheCookieBehavior.all(),
defaultTtl: Duration.days(0),
maxTtl: Duration.days(365),
minTtl: Duration.days(0),
}),
},
});
Has anyone found a solution for this issue? The cookie is not removed after successful logout, so the users are still logged in.
I’m facing the same issue while deploying Next.js to Azure Static Web Apps. Logout works fine locally, but it doesn’t seem to work when deployed. Even though all requests in the network tab appear to be fine, it keeps signing in automatically.
Same problem here.
I have the same problem. Locally works fine, but on azure static web apps the user ist still logged in.
same issue here. can't believe this is still not fixed...
UPDATE: not nextjs-auth0's issue. It's like someone else mentioned, CloudFront is caching the cookie.
So it looks like there are two things that could be happening:
Make sure you are not using next/link
component for Login / Logout links.
<Link href="/api/auth/logout">Logout</Link>
Being that next/link
is for client side linking, it doesn't actually do a full page request to the href
value.
Changing it to a regular <a />
element should make Login / Logout work as expected as far as I know.
<a href="/api/auth/logout">Logout</a>
For app router, check example-app nav.tsx
component for reference.
If CloudFront is caching the cookie, try updating the cache policy using the cookieBehavior
line of code from @JeroenMinnaert answer .
cookieBehavior: CacheCookieBehavior.all()
@treckstar I've been going in circles with this library for at least a month - the next/link
you mentioned fixed everything for me
Checklist
Description
Everything works fine in local, I implement same way as example app. Just login/logout, however after deploy to azure static web, it fails to signout, always immediately signs back, which extremely annoying. I have tried all solutions online, and wasted 2 days on this issue, still can't figure it out. Attach a screenshot, logout v2 url is called, but session / cookie not cleaned, I even tried to manually clean it, but it adds back immedately.
Reproduction
Just deploy azure static website, I think this is common issue.
Additional context
n/a
nextjs-auth0 version
3.5.0
Next.js version
8.1.0
Node.js version
v20.8.0