Auth0-spa-js: isAuthenticated method returns always false

[szilagyikinga]

Description

I am trying to setup refresh token rotation in a react application. I manage to create the Auth0Client, login and get to token with getTokenSilently but isAuthenticated, getUser or getIdTokenClaims are not working

Reproduction

I was making my tests with the react sample app. Everything works fine below the version 1.7.0. I start to have the issues described above after the refresh token rotation implementation.

Is it an issue with the auth0 configuration? I did make the change for the rotating refresh token behavior

[adamjmcgrath]

Hi @szilagyikinga - thanks for your report. Do you have a sample application running anywhere we can look at to debug? Or can you show us any code?

[JonathanHarvey]

Sounds similar to the issue that I came across whilst trying to reproduce issue #480. It occurred for me when the API Token Expiration period was set to a value of less than 60 seconds.

[szilagyikinga]

Hi, thanks for you answer. @JonathanHarvey I will check with 60 and let you know!

[tudorgergely]

I have a similar issue but only during cypress tests (it always returns false in tests but works fine otherwise). Did anyone encounter this during cypress tests?

[stevehobbsdev]

👋 we have identified an issue where methods like isAuthenticated and getUser don't behave properly when the token expiry is less than 60 seconds. We're working on a fix for the next version, but in the meantime the workaround is to use an expiry of 60 seconds or more, if possible.

[szilagyikinga]

Setting token expiration to 60 seconds solved my problem also. Thanks to everyone for your help.