# Auth0 integration - Callback URL mismatch

**URL:** <https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266>\
**Category:** How do I?\
**Created:** [February 24, 2022, 3:43pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266 "2022-02-24T15:43:05Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 24, 2022, 3:43pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/1 "2022-02-24T15:43:05Z")

</div>

I’ve integrated my project with Auth0. I’ve created a button for sign up / login with a workflow with an Auth0 action of “Login with Popup”. But when I click it I get `Callback URL mismatch.` on Auth0 popup.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/a506739fd38f71b32d9453e4c066f20438a83498.png)

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 24, 2022, 3:47pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/2 "2022-02-24T15:47:29Z")

</div>

Also when setting up Auth0 plugin I’m getting this error `Unable to get plugin roles. Please verify the plugin configuration.`

 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/7847b3b0a1edcb4d0757422e420282fa2a6c3053.png)

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [February 24, 2022, 5:44pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/3 "2022-02-24T17:44:50Z")

</div>

Hi @brunoconleite 👋

It seems you are missing the Auth0 token in WeWeb:

 ![Screenshot 2022-02-24 at 18.41.03](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/13abe334f8f67cff3720d3b97e410b5d7169c3da.png)

Here’s where you can find it in Auth0:

 ![Screenshot 2022-02-24 at 18.43.46](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/b646b426f321daa918aa57295d8d4229eec88b0e.jpeg)

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 24, 2022, 5:58pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/4 "2022-02-24T17:58:55Z")

</div>

Hello @Joyce. I’ve followed the tutorials and available videos. It was set up correctly:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/f89400590db9bf2e81f235cb6b6aeb629784f1ae.png)  
I’ve also tried removing the plugin and adding it again from scratch but the issue persisted.

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [February 25, 2022, 9:11am UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/5 "2022-02-25T09:11:30Z")

</div>

Mmm, I’m sorry to hear that 🙁

The Auth0 plugin seems to be working fine on our side but we’ll investigate further. I’ll get back to you asap!

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 12:14pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/6 "2022-02-25T12:14:54Z")

</div>

Thanks @Joyce, please let me know if you want to schedule some time so I can guide you through the issue.

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [February 25, 2022, 5:10pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/7 "2022-02-25T17:10:35Z")

</div>

Hi again @brunoconleite 👋

I can confirm there are no issues with the Auth0 plugin at the moment.

Would you mind recording a short loom showing your setup in Auth0 and WeWeb, maybe walk us through how you setup the plugin from scratch so we can figure out what’s going on?

Feel free to send me the recording in a DM to keep your token safe 🙂

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 8:32pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/8 "2022-02-25T20:32:08Z")

</div>

Hello @Joyce. Couldn’t find a way to send a DM on this system.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/0c22b2aa351152d4b6b2aebf924d4f910dd03f47.png)

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 8:32pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/9 "2022-02-25T20:32:45Z")

</div>

On the mailbox screen is stated that you should click on user avatar and select the message button.  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/ac827e701131249fbfcef296c138ac9357230045.png)  
But I can’t see any message button on your avatar.

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 8:33pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/10 "2022-02-25T20:33:35Z")

</div>

So I’m sharing the link to the video here directly. The token is being shown partially only.

> **[Meet Google Drive – One place for all your files](https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&continue=https:%2F%2Fdrive.google.com%2Ffile%2Fd%2F1Kz6MwrJp7NzVc6m6it_dwBcIJbj9ptpA%2Fview?usp%3Dsharing&followup=https:%2F%2Fdrive.google.com%2Ffile%2Fd%2F1Kz6MwrJp7NzVc6m6it_dwBcIJbj9ptpA%2Fview?usp%3Dsharing)**
>
> Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.

I’ve splitted the post in multiple messages because the community system insists that I can only attach one media per post as I’m a new user.

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 8:34pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/11 "2022-02-25T20:34:41Z")

</div>

So I’m sharing the link to the video here directly. The token is being shown partially only.

> **[weweb-auth0-issue-2022-02-25\_17.16.16.mkv](https://drive.google.com/file/d/1Kz6MwrJp7NzVc6m6it_dwBcIJbj9ptpA/view?usp=sharing)**
>
> Google Drive file.

I’ve splitted the posts here in multiple messages because the community system insists that I can’t attach more than one media per post.

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [February 25, 2022, 8:36pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/12 "2022-02-25T20:36:33Z")

</div>

I’ve posted the video link here but the community bot is hiding it for your review. You may find the link there.

Here is the part from mailbox that wrongly instructs how to send DMs

 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/fba0f463ab475f37775a58eef167a9ee446366e9.png)

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [February 28, 2022, 10:39am UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/13 "2022-02-28T10:39:07Z")

</div>

Hi @brunoconleite, sorry you’ve been hitting all the walls! Thanks a lot for your patience and taking the time to record this video 🙂

We’re looking it to it now.

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [March 3, 2022, 11:14am UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/14 "2022-03-03T11:14:12Z")

</div>

Hi @brunoconleite, we’ve found the problem 🙂

It was coming from the setup in Auth0.

The Machine-to-Machine application needs to have the rights to configure the Single Page Application.

In your case, you wanted to use the Satori API so you would need to toggle the “Unauthorized” setting here:

 ![Screenshot 2022-03-02 at 17.52.20](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/045c04dd7306abfd72e9aaac9774e5d955768929.jpeg)

Then, you would need to select all the permissions so WeWeb can configure the SPA:

 ![Screenshot 2022-03-02 at 17.52.28](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/1X/51110d5b4a5d840f29125b25210b9bcbc0697c53.png)

Does that help?

---

<div class="post-metadata">

**Author:** ![brunoconleite](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/brunoconleite/32/319_2.png) [@brunoconleite](https://community.weweb.io/u/brunoconleite)\
**Post date:** [March 4, 2022, 8:58pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/15 "2022-03-04T20:58:01Z")

</div>

Thanks @Joyce. That worked! I can also see that the auth0 token is available on plugin.  
I was able to call the API successfully.

Just a note: my auth0 API had an audience set up so I had to put this as the default audience on my tenant so that the Weweb tokens have this audience also.

---

<div class="post-metadata">

**Author:** ![edojay](https://avatars.discourse-cdn.com/v4/letter/e/eb9ed0/32.png) [@edojay](https://community.weweb.io/u/edojay)\
**Post date:** [July 17, 2023, 8:50pm UTC](https://community.weweb.io/t/auth0-integration-callback-url-mismatch/266/16 "2023-07-17T20:50:41Z")

</div>

Hi @Joyce, I am currently experiencing the same issue myself and have noticed that other threads discussing this problem. After reviewing the threads mentioned below:

> [@Auth0 callback URL mismatch](https://community.weweb.io/t/auth0-callback-url-mismatch/1350):
>
> Hi, I’m using the Auth0 plugin to authenticate but it isn’t working, the popups shows “callback URL mismatch The provided redirect\_uri is not in the list of allowed callback URLs”. I have set the pluggin properly, the api explorer is authorized and has all the permissions. (the other topic similar to that one didn’t help).

> [@Auth0 Callback URL mismatch 2](https://community.weweb.io/t/auth0-callback-url-mismatch-2/2260):
>
> Hi, I’m currently encountering an issue with the Auth0 plugin for authentication. The popup displays an error message stating “Callback URL mismatch. The provided redirect\_uri is not in the list of allowed callback URLs.” I have meticulously configured the plugin, ensured that the API explorer is authorized, and granted all necessary permissions. Unfortunately, the solutions provided in similar topics haven’t resolved the issue.

including this one, I made the necessary adjustments to my settings based on the provided instructions. Unfortunately, I am still encountering the “Callback URL mismatch” error.
