Better Auth•2w ago

`state_mismatch` On Latest Release

same application with no changes works fine on 1.3.18; if you upgrade to the latest release all OAuth providers are giving state_mismatch error.

10 Replies

Ping•2w ago

Are you using some of the api calls relating to the oauth flow on the server? also are you using expo? When starting the oauth flow we generate a state identifier, which is stored as a cookie, then once the flow is complete and you are returned to /api/auth/callback we check if that cookie is the same as the current oauth flow's state identifier, if that check fails than it's a state-mismatch

jjjrmyOP•2w ago

no not at all. my code is public so I’ll share it in a sec @Max https://github.com/jjjrmy/sutando-client-example/blob/main/app/pages/auth.vue#L266-L269

    const { error: authError } = await authClient.signIn.social({
      provider: "apple",
      ...(idToken ? { idToken } : { callbackURL: "/" }),
    });
    if (authError) throw authError;

    // Wait for session to be fetched before navigating
    await fetchSession(true);

    await navigateTo("/");

    const { error: authError } = await authClient.signIn.social({
      provider: "apple",
      ...(idToken ? { idToken } : { callbackURL: "/" }),
    });
    if (authError) throw authError;

    // Wait for session to be fetched before navigating
    await fetchSession(true);

    await navigateTo("/");

no I'm not using expo - this is just a Nuxt app

zander•2w ago

Im also experiencing this issue with twitch login. The click 'here' button does not work and causes a State Mismatch. Verification not found error

zander•2w ago

causing big issues

jjjrmyOP•7d ago

@Max

bekacru•7d ago

you're using capicitor right?

jjjrmyOP•7d ago

I am yes, but this is just the non-capacitor web version I'm testing on. so don't say it has to do with cookies vs access tokens seems it's a big problem because many people on github are reporting it

bekacru•7d ago

this shouldn't be a problem for a pure nuxt project. If that's happening can you link me to a repro?

jjjrmyOP•5d ago

here you can uninstall Capacitor I guess 🤷🏼‍♂️ @Max @bekacru how's hype?

bekacru•4d ago

will be fixed shortly. with apple the problem is they use post request and that introduced more problems. Sorry for the breaking change, it'll be fixed on the next release

Gaming

Programming

`state_mismatch` On Latest Release

Did you find this page helpful?