Skip to content

Conversation

@pmalouin
Copy link
Contributor

No description provided.

@priley86
Copy link
Contributor

priley86 commented Nov 4, 2025

  • verified both examples to work w/ my GenAI tenant locally
  • discussed upcoming changes in auth0 docs-v2 repo (captured in: https://auth0team.atlassian.net/browse/AIDX-240)
  • known limitation about loss of message history in Hono + React SPA example after step up flow is acceptable to the business as of now (and could be improved in future w/ popup flow vs redirect flow)

priley86
priley86 previously approved these changes Nov 4, 2025
- **Allowed Logout URLs**: `http://localhost:5173`
- **Allowed Web Origins**: `http://localhost:5173`
- Make sure to Allow Refresh Token in Grant Types under Advanced Settings but you can disable "Allow Refresh Token Rotation"
- Enable "Allow Refresh Token Rotation"
Copy link
Contributor

@priley86 priley86 Nov 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what's interesting here is that i've tested my SPA to work when it does have this setting (Allow Refresh Token Rotation) enabled, however on the Next.js chatbot example (and in that README here), we have it disabled. It's an interesting diff we should look into.

@priley86
Copy link
Contributor

  • tested react-langgraph-api flow to work as documented here
  • noted redirect behavior is less than ideal w/ existing step-up auth flow, and popup behavior is preferred. (scheduled for future improvements)

Changes look ready here and happy to approve after auth0 next.js + auth0 spa SDKs have been updated to target versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants