When signin in everything works as intended, but signout doesn't remove the cookies from Auth0.
So when signing in again (directly after a signout) the user never sees the Auth0 site because the cookie still exist and Auth0 automatically uses it for granting a code again.
How to reproduce
Configure a (SvelteKit) project with Auth0 as the only provider.
Then signin, signout and signin again.
The second signing wont bring you to the Auth0 signin screen but rather signin directly (as if you were never signed out and just refreshed).
Expected behavior
After a signout the user should always be displayed with the signin options again.
E.g. forgot password or change account is only possible this way.
Provider type
Auth0
Environment
System:
Binaries:
Browsers:
AuthJs
Reproduction URL
https://github.com/domlen2003/cf-auth0-drizzle-sveltekit-example
Describe the issue
When signin in everything works as intended, but signout doesn't remove the cookies from Auth0. So when signing in again (directly after a signout) the user never sees the Auth0 site because the cookie still exist and Auth0 automatically uses it for granting a code again.
How to reproduce
Configure a (SvelteKit) project with Auth0 as the only provider. Then signin, signout and signin again. The second signing wont bring you to the Auth0 signin screen but rather signin directly (as if you were never signed out and just refreshed).
Expected behavior
After a signout the user should always be displayed with the signin options again. E.g. forgot password or change account is only possible this way.