Skip to content

Remove refresh_token from cookie instead of setting to NULL#193

Merged
kailash-b merged 1 commit into
mainfrom
bug/SDK-7171
Nov 24, 2025
Merged

Remove refresh_token from cookie instead of setting to NULL#193
kailash-b merged 1 commit into
mainfrom
bug/SDK-7171

Conversation

@kailash-b
Copy link
Copy Markdown
Contributor

@kailash-b kailash-b commented Nov 21, 2025

Description

This PR improves the handling of refresh token failures in the Auth0 ASP.NET Core Authentication library.

Fix

  • When a refresh token fails to refresh, the code now removes the refresh token from the authentication properties to ensure that the OnMissingRefreshToken event is triggered on subsequent requests.
  • A new integration test has been added to verify that OnMissingRefreshToken is called after a refresh token failure and subsequent request.

References

Testing

  • Should_Call_OnMissingRefreshToken_After_Refresh_Fails test added to simluate simulate a scenarios where refresh fails.

  • This change adds test coverage for new/changed/fixed functionality

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not main

Note : This fix is based on the issue raised by janruo in #191 . The fix will be attributed to @janruo during release.

@kailash-b kailash-b requested a review from a team as a code owner November 21, 2025 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants