Auth0 Hidden Submit Button Appears on Universal Login Form
Last Updated:
Overview
A hidden submit button with a hashed class name appears on the Auth0 Universal Login form due to Cascading Style Sheets (CSS) obfuscation on identifier-first login screens. The button is expected behavior and safely enables form submission via the Enter key. Administrators observe a hidden button in the HTML code of the New Universal Login form in some environments but not others. The HTML code resembles the following snippet:
<button type="submit" class="c5b714f88" style="opacity:0 !important;position:absolute !important;pointer-events:none !important" value="default" aria-hidden="true" tabindex="-1" name="action">Continue</button>Applies To
- Universal Login
- Identifier-first login flow
Cause
Auth0 renders a standard hidden submit button (ulp-hidden-form-submit-button) at the top of the form on identifier-first login screens. On tenants serving the obfuscated bundle, Auth0 renames stable class names to hashes at build time. This causes the class name to appear as a scrambled hash (for example, c5b714f88). The button appears inconsistently across environments if the identifier-first flow configuration rolls out to one environment before another.
Solution
Why does the hidden submit button appear on the Auth0 New Universal Login form?
The hidden button is expected behavior and does not negatively affect the login flow. Auth0 places the button at the top of the form so that pressing the Enter key submits the primary action reliably across browsers. Auth0 configures the button with aria-hidden="true", tabindex="-1", and opacity:0 so that sighted users, keyboard tab orders, and screen readers skip it.
How should administrators interact with the hidden submit button?
Administrators must not target the hashed class (e.g., c5b714f88) or any obfuscated selector in custom CSS or JavaScript (JS). Auth0 regenerates these hashes on every build, which breaks any custom code that depends on them. Administrators must use stable data attributes to hook into the Universal Login Page (ULP) structure.
