Unable to use Cypress with in memory token storage after changes in version 1.12.0

Describe the problem

In Cypress tests you cannot redirect back and forward to the authorisation server for interactive login. What you do instead is acquire a token with by using password flow and use this token in the application you are testing.

This was all working fine, until version 1.12.0 added some additional state validation. It checks if the nonce matches with the nonce claim in the id token. But since I acquire the token with the password flow, there is no nonce claim in the token.

It looks like it’s not possible to use the combination of Cypress and Auth0 (storing the token in memory) at the moment. See also the discussion here

What was the expected behavior?

Using the great products Cypress and Auth0 together.

Environment

• Version of auth0-spa-js used: 1.12.0 and higher
• Which framework are you using, if applicable (Angular, React, etc): Cypress

[stevehobbsdev]

@HWouters After some discussion with the team, we’ve decided to remove this check. A PR has been raised and is attached to this issue.

[stevehobbsdev]

@weyert I see you’ve raised another issue (#676), let’s chat about it on there.