When users log in they are getting a server error

[RCheesley]

I am able to log in fine with Auth0 but when some of our initial testers are trying to log in they are getting a server error:

I've so far had two reports of this nature. @froger @rsdeus I can't see anything in the nginx logs, maybe you can take a look?

In the Auth0 logs I am seeing:

"description": "Invalid authorization code", this immediately follows a successful login from the user in the logs which is a bit weird? They do not get logged in and I am not seeing a user being created for them in Decidim.

❓ Maybe it is falling over when trying to create a user?

[RCheesley]

Here is the error in more detail from the tester above:

Strangely some people are getting in fine and others are getting errors.

[RCheesley]

From google search: https://auth0.com/docs/customize/integrations/cms/wordpress-plugin/troubleshoot-wordpress-plugin-invalid-state-errors#:~:text=The%20most%20common%20cause%20of,Applications%20%3E%20Settings%20and%20test%20again.

Cached callback URLs The most common cause of the invalid state error is when the callback URL is cached on the server.

Exclude caching on your server for all the URLs listed in the Allowed Callback URLs field in Auth0 Dashboard > Applications > Applications > Settings and test again. In addition, exclude caching the site URL (/index.php on a regular install) if it has an Auth0 URL parameter.

[RCheesley]

@froger @rsdeus would you be able to look into excluding the callback URLs?

[froger]

I just checked, and there is no caching nginx side. Will need to reproduce my side to see what is happening

[RCheesley]

Sure - you should be able to sign up at https://forum.mautic.org and then log in with that credential.

[RCheesley]

@froger did you manage to replicate the issue that users were facing? It seemed to be folks who didn't have an a/c already on Decidim.

[RCheesley]

Actions:

• [x] @froger is looking into it - seems to be a bug with the Redirect module and caching