search

ministryofjustice / analytics-platform

Parent repository for the MOJ Analytics Platform
MIT License
14 stars 1 forks source link

Auth0 says "Enter your email..." trying to access apps #73

Closed davidread closed 6 years ago

davidread commented 6 years ago

What happened?

MF reported that when accessing coroner-stat-tool-ext app you see Auth0 dialog: "Enter your email to sign in or create an account": capture

All the users have been granted access. They are external users using the emailed magic link.

I'm also now seeing this with: http://probation-consultation-tool.apps.alpha.mojanalytics.xyz/

davidread commented 6 years ago

@r4vi mentioned solving it for MF's app:

there was something wrong with the auth0 config for this app

r4vi commented 6 years ago

@davidread this field was blank in auto0 image

we've had issues with this in the past where setting it via API doesn't "stick". I think @andyhd updated the API client to ensure this was set (I remember @xoen reviewing a PR about it a long time ago)

my first though was that this app predated that change.

andyhd commented 6 years ago

I think this is to do with users having been added to the wrong group in Auth0 - there have been "duplicate" groups created when app name normalization has been applied differently (usually capitalization). I thought I cleared all that up, but it's possible that this predates the fixes, or that something is still normalizing group names incorrectly somewhere.

👋

davidread commented 6 years ago

This app had a problem with the Auth0 field "Allowed Web Origins" being blank. I've fixed that manually.

I determined problem by checking the Auth0 logs for the time of log-in. The message said:

The specified redirect_uri 'https://probation-consultation-tool.apps.alpha.mojanalytics.xyz/callback' does not have a registered origin.

davidread commented 6 years ago

We think this was due to service issues with auth0 yesterday. Closing, for now.