AuthError: Unexpected error in authentication.: Hash does not contain state.

I’m submitting a…

[ ] Regression (a behavior that used to work and stopped working in a new release)
[x] Bug report  
[ ] Performance issue
[ ] Feature request
[ ] Documentation issue or request
[ ] Other... Please describe:

Browser:

• Chrome version XX
• Firefox version XX
• IE version XX
• Edge version XX
• Safari version XX

Library version

1.0.0

Current behavior

Steps to reproduce.

1. Attempt a B2C login flow using loginRedirect
2. When asked to log in, click “reset password” (This will redirect back to the SPA)
3. Catch the AuthError (AADB2C90118) and redirect the user to the password reset flow
4. Click “cancel” on the password reset flow. (This redirects back to the SPA)

now calling new UserAgentApplication(config) will error with the message:

AuthError: Unexpected error in authentication.: Hash does not contain state.

At this point you can’t recover. Even if you catch the error, clear session storage, and try to call new UserAgentApplication(config) it will still error again.

Expected behavior

After redirecting back to the SPA after the user clicks “cancel” msal should trigger your errorReceivedCallback and give it an error that can be recovered from.

[StefanChristou]

Please re-open this issue. Getting the same problem, setting storeAuthStateInCookie to true does not resolve the problem.

[kaytrip]

Same issue here with Google Chrome (build 80.0.3987.122). Regular login works, but when using a custom Sign Up policy we receive the AuthError: Unexpected error in authentication.: Hash does not contain state. error.