ROPG Grants Failed Logins Not Intuitive Outcome - fepft - fp

Overview

The customer reported they can see more than one log type for the same error. They can see  2 different type of logs for a failed login: a "fepft" and a "fp" log types
 

Steps to reproduce

  • Enter the wrong password for a ROPG flow

Applies To

  • Resource Owner Password Grant (ROPG)

Solution

This behavior, despite is not the most intuitive one, it is expected. This happens when the login fails for an ROPG flow. This generates a  "fepft" event type continued by either a "fu" or "fp" login event if the username or password was wrong, respectively. 
The first event is caused due to the failed call to the token endpoint, and then any "fu" or "fp" are generated for the wrong username/password itself.
To understand this it is suggested to analyze the ROPG flow diagram in the public documentation: https://auth0.com/docs/get-started/authentication-and-authorization-flow/resource-owner-password-flow 

Recommended content

No recommended content found...