Clicking the Confirm or Cancel buttons multiple times in the Device Confirmation screen during the Device Auth Flow causes the following error in Chrome and Brave browsers:

invalid_request: You may have pressed the back button, refreshed during login, opened too many login dialogs, or there is some issue with cookies, since we couldn't find your session. Try logging in again from the application and if the problem persists please contact the administrator.

The same issue may also generate the following error in the dashboard logs:

A user has attempted to access a login page directly. This is not supported unless a "Application Login URI" is set for your application, or a "Tenant Login URI" is set for your tenant. For more information, see: https://auth0.com/docs/universal-login/default-login-url



In Firefox, this issue doesn’t occur, the Confirm button can be clicked multiple times and the user is still presented with the next Auth0 modal to enter credentials.

• New Universal Login

This is a known issue with the Device Confirmation widget, which is currently in the backlog.

Please share feedback with the product team to help with prioritization.

If using a custom domain, a workaround to prevent clicking these buttons multiple times can be implemented with a Javascript code using universal login page templates.

This sample can be used as a starting point while implementing the solution.

NOTE: The solution depends on some internal HTML attributes on the page. A name change may break the code, leading to login issues.