Well this is a new problem I hadn't encountered before.
User contacts CS complaining that they can't login, after repeated attempts. We find their attempts in Sentry reporting and find errors that their brand new token had already expired.
Turns out their computer clock was 15 hours in the future, so #auth0 believed the auth token's expiration date was 14 hours ago.
🆕 blog! “Auth0 - Adding Twitter Screen Names to a User with Actions”
Grrrr. Auth0 have a nifty service to let users log in to your site using a social network. Users don't need an account with you, they can sign in with Twitter, Facebook, GitHub, etc. But there's a bug which is five years old. Auth0 doesn't show the screen name of Twitter users (e.g. @Edent). There […]
There is a sea of Cloud Auth / Identity management providers.
There was a time I used to roll my own, but as security is getting complicated, it seems for startups & small to medium businesses it is better to use a cloud auth provider.
Please share your thoughts on your experience with this as I look into this area.