ROPG Grants Failed Logins Not Intuitive Outcome - fepft - fp
Last Updated:
Overview
The customer reported they can see more than one log type for the same error. They can see 2 different type of logs for a failed login: a "fepft" and a "fp" log types
Steps to reproduce
- Enter the wrong password for a ROPG flow
Applies To
- Resource Owner Password Grant (ROPG)
Solution
This behavior, despite is not the most intuitive one, it is expected. This happens when the login fails for an ROPG flow. This generates a "fepft" event type continued by either a "fu" or "fp" login event if the username or password was wrong, respectively.
The first event is caused due to the failed call to the token endpoint, and then any "fu" or "fp" are generated for the wrong username/password itself.
To understand this it is suggested to analyze the ROPG flow diagram in the public documentation: https://auth0.com/docs/get-started/authentication-and-authorization-flow/resource-owner-password-flow