Auth0-spa-js: Chrome hangs on createAuth0Client

Created on 3 Oct 2020  ·  10Comments  ·  Source: auth0/auth0-spa-js

Describe the problem

createAuth0Client hangs in Chrome when loading for a user who is already logged in. It does not hang if there is no logged in user.

What was the expected behavior?

If there is a user logged in, the page should load immediately.

Reproduction

Use the test application in this repository: https://github.com/modeswitch/auth0-test-app

  1. Fill in your own Auth0 details in plugins/auth0.js near the bottom (search for FIXME).
  2. Run npm run dev in the top-level directory and navigate in Chrome (Beta) to the URL provided (should be http://localhost:3000).
  3. Log in when prompted. You should be redirected to the demo page. I've added a sign out button to make testing easier.
  4. Reload the page. You should now see a loading spinner. The app is waiting on createAuth0Client to finish.

The problem is not reproducible in Firefox and some earlier versions of Chrome as far as I've checked.

Environment

Please provide the following:

  • Version of auth0-spa-js used: v1.12.1
  • Which browsers have you tested in? Chrome Beta Version 86.0.4240.68 (Official Build) beta (64-bit) on Fedora 31
  • Which framework are you using, if applicable (Angular, React, etc): Nuxt
  • Other modules/plugins/libraries that might be involved:
bug report needs investigation
Source
picture modeswitch

All 10 comments

@stevehobbsdev ^

modeswitch picture modeswitch on 3 Oct 2020

@modeswitch Thanks, I've managed to reproduce this on Chrome Beta (86). It relates to a dependency of ours that allows us to sync operations across tabs.

The weird thing is it works fine on Chrome Canary (88). I'm loathe to take too much action based on evidence found in Beta software where there could be unrelated problems. Looks like there might be a stable release this week, let's review once it's out.

cc: @adamjmcgrath

stevehobbsdev picture stevehobbsdev on 4 Oct 2020

@stevehobbsdev Could you elaborate a bit? Which dependency and what's the issue? I'm asking because this isn't the first time I've seen this problem.

modeswitch picture modeswitch on 5 Oct 2020

Hi @modeswitch - I don't think it's an issue with a dependency.

Using Chrome 86 Beta, I can reproduce the issue with just the following html:

<html>
<head>
  <meta charset="utf-8">
</head>
<body>
<iframe src="http://example.com/"></iframe>
<script>
  document.querySelector('iframe').onload = () => console.log('loaded: ', performance.now());
</script>
</body>
</html>

When I load the page from http://localhost:3000 the page load hangs and the iframe takes ~40 secs to load (which is the same delay I'm seeing from the /authorize iframe that getTokenSilently creates)

I'll see if I can find a chromium bug that refers to this issue.

adamjmcgrath picture adamjmcgrath on 5 Oct 2020

Looks like this is only an issue with 86.0.4240.68 - I've just run it on the latest Beta that got released on Monday 86.0.4240.75 and it seems to work fine.

I can't see anything in the changelog that might have caused the issue 🤷

adamjmcgrath picture adamjmcgrath on 7 Oct 2020
👍1

@adamjmcgrath I have been encountering this issue even on 86.0.4240.75 ... a 30+ second delay between a page refresh and receiving the token.

Happens on 87.0.4278.0 as well (not sure if that's the latest unstable, i'm on ubuntu and I don't remember if I have to update manually thru apt)

It only seems to occur with refreshes, new tab seems to be fine.

krisdages picture krisdages on 12 Oct 2020

@krisdages We don't think this is related to our SDK. Are you able to reproduce this with the simple case that @adamjmcgrath showed here? https://github.com/auth0/auth0-spa-js/issues/591#issuecomment-703673884

stevehobbsdev picture stevehobbsdev on 12 Oct 2020

Tried the simple case and it doesn't exhibit the issue.
I am seeing it with createAuth0Client though. I can look a little deeper and see if I can find more details about where exactly that's lagging.

-- Edit --
The SuperTokensLock acquisition appears to be what is hanging -- and if that timeout is ms, it doesn't look likes it's being respected.

await lock.acquireLock(GET_TOKEN_SILENTLY_LOCK_KEY, 5000);
krisdages picture krisdages on 12 Oct 2020

@krisdages I initially thought it was browser-tabs-lock too but it doesn't seem to be.

Are you still having issues with this with the latest beta? We've been unable to reproduce this so far since 86.0.4240.75.

stevehobbsdev picture stevehobbsdev on 20 Oct 2020

With that particular version of 86 I was still having it, but after upgrading to 87.0.4280.27 it seems to be resolved.

krisdages picture krisdages on 22 Oct 2020
👍1
Was this page helpful?
0 / 5 - 0 ratings

Related issues

alvarocjunq picture alvarocjunq  ·  4Comments
stupidSheep picture stupidSheep  ·  4Comments
justinhelmer picture justinhelmer  ·  4Comments
philipp-tailor picture philipp-tailor  ·  4Comments
patrickcorrigan picture patrickcorrigan  ·  3Comments