library · inferred from evidence
auth0-react
An SDK for React applications to handle authentication, including refresh token management.
- Invalid state after social login: cookies blocked, clock skew, mismatched redirect
The state parameter protects the login flow from CSRF. Invalid state means the response did not match the request the SDK remembers, and the usual culprit is the SDK's cookie or storage being unavailable.