Persistent auth/error on First Login Attempt (OAuth State Loss)
Next.jsHello, I'm integrating Keycloak with
1. Attempt 1 (Fails): User initiates login, authenticates on Keycloak, but is redirected back to
2. Attempt 2 (Succeeds): If the user clicks "Sign In" again, they are immediately logged in without re-entering Keycloak credentials.
Diagnosis: Keycloak successfully establishes an SSO session on Attempt 1, but the
- Provider: Keycloak
- Framework: Next.js App Router (
- Environment: Local development (
- Cookie Prefix:
1. Cookie Fix: What is the recommended explicit configuration for
2. Dev Environment: Could running on
3. Workaround: Is redirecting users from
better-auth
The Problem: Failure Loop
1. Attempt 1 (Fails): User initiates login, authenticates on Keycloak, but is redirected back to
/api/auth/errorauthentication_expiredstate_mismatch2. Attempt 2 (Succeeds): If the user clicks "Sign In" again, they are immediately logged in without re-entering Keycloak credentials.
Diagnosis: Keycloak successfully establishes an SSO session on Attempt 1, but the
better-authradar.oauth_state
Setup Details:
- Provider: Keycloak
- Framework: Next.js App Router (
toNextJsHandler(auth)- Environment: Local development (
http://localhost:3001- Cookie Prefix:
radar
Questions:
1. Cookie Fix: What is the recommended explicit configuration for
SameSitePathauth.tsradar.oauth_state2. Dev Environment: Could running on
http://localhost3. Workaround: Is redirecting users from
/api/auth/error
