{"action":"created","issue":{"url":"https://api.github.com/repos/auth0/auth0.js/issues/670","repository_url":"https://api.github.com/repos/auth0/auth0.js","labels_url":"https://api.github.com/repos/auth0/auth0.js/issues/670/labels{/name}","comments_url":"https://api.github.com/repos/auth0/auth0.js/issues/670/comments","events_url":"https://api.github.com/repos/auth0/auth0.js/issues/670/events","html_url":"https://github.com/auth0/auth0.js/issues/670","id":298082144,"number":670,"title":"access_token to short but passing authentication","user":{"login":"wpitallo","id":12214559,"avatar_url":"https://avatars3.githubusercontent.com/u/12214559?v=4","gravatar_id":"","url":"https://api.github.com/users/wpitallo","html_url":"https://github.com/wpitallo","followers_url":"https://api.github.com/users/wpitallo/followers","following_url":"https://api.github.com/users/wpitallo/following{/other_user}","gists_url":"https://api.github.com/users/wpitallo/gists{/gist_id}","starred_url":"https://api.github.com/users/wpitallo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wpitallo/subscriptions","organizations_url":"https://api.github.com/users/wpitallo/orgs","repos_url":"https://api.github.com/users/wpitallo/repos","events_url":"https://api.github.com/users/wpitallo/events{/privacy}","received_events_url":"https://api.github.com/users/wpitallo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-02-18T12:46:01Z","updated_at":"2018-02-20T19:22:05Z","closed_at":"2018-02-19T12:09:19Z","author_association":"NONE","body":"Hi I have been using the new version 9.2.2 for about a two weeks, everything was working perfectly. Yesterday however I created a new user logged in everything was fine, then all of a sudden I started getting unauthorized results back from my server. I investigated and found that my the access_token was way to short about the size of a regular guid. I logged out and back in and everything was ok again but this has me quite concerned. What caused the short access token to be returned? Each time I refreshed the page auth0.js also said that I was authenticated even with this short access token. This should not be happing, also worring that its easy to reproduce? Any ideas what's wrong here?"},"comment":{"url":"https://api.github.com/repos/auth0/auth0.js/issues/comments/367089001","html_url":"https://github.com/auth0/auth0.js/issues/670#issuecomment-367089001","issue_url":"https://api.github.com/repos/auth0/auth0.js/issues/670","id":367089001,"user":{"login":"luisrudge","id":941075,"avatar_url":"https://avatars3.githubusercontent.com/u/941075?v=4","gravatar_id":"","url":"https://api.github.com/users/luisrudge","html_url":"https://github.com/luisrudge","followers_url":"https://api.github.com/users/luisrudge/followers","following_url":"https://api.github.com/users/luisrudge/following{/other_user}","gists_url":"https://api.github.com/users/luisrudge/gists{/gist_id}","starred_url":"https://api.github.com/users/luisrudge/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/luisrudge/subscriptions","organizations_url":"https://api.github.com/users/luisrudge/orgs","repos_url":"https://api.github.com/users/luisrudge/repos","events_url":"https://api.github.com/users/luisrudge/events{/privacy}","received_events_url":"https://api.github.com/users/luisrudge/received_events","type":"User","site_admin":false},"created_at":"2018-02-20T19:22:05Z","updated_at":"2018-02-20T19:22:05Z","author_association":"MEMBER","body":"The best thing to do here is contact our amazing support team at https://support.auth0.com and send [HAR](https://auth0.com/docs/support/troubleshooting-with-har-files) files to them with the requests that you get access_token as JWT/opaque string. They can analyze the HAR files and give you a better answer on what's going on. "}}
{"actor":{"display_login":"luisrudge"}}