# Open ID Connect Troubleshooting

**URL:** https://meta.discourse.org/t/open-id-connect-troubleshooting/224063
**Category:** SSO
**Tags:** openid-connect
**Created:** [April 12, 2022, 4:52pm UTC](https://meta.discourse.org/t/open-id-connect-troubleshooting/224063 "2022-04-12T16:52:40Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sports\_dev](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@sports\_dev](https://meta.discourse.org/u/sports_dev)
#### Post date: [April 12, 2022, 4:52pm UTC](https://meta.discourse.org/t/open-id-connect-troubleshooting/224063/1 "2022-04-12T16:52:40Z")

</div>

Hello I’m working with a high-traffic self-hosted instance of Discourse.  
It’s hosted on Digital Ocean. It uses the discourse-openid-connect plugin and Auth0 to do authentication.  
For authorization we use a third-party vendor to check the cookies for the user’s email we’ve gotten from Auth0.  
**It seems that the email value is not getting written to the cookie**. When our third-party authorization goes to check for the cookie, it’s not finding it. Our users get our paywall even though they are paid subscribers.  
My question is how can I troubleshoot this to see where the problem lies?  
I have:

- Turned on the logs. But I don’t have the experience with the Open Id process to interpret the logs.
- I haven’t made any changes to the plugin settings.
- haven’t looked at the Open ID connect discovery document yet, I’m working on getting access to that soon.

These discourse forums have been running without problems for a long time. I haven’t made any changes to the plugins. I haven’t added/taken away anything.

I _think_ this started happening after the **2.9.0.beta2** update.  
You can see the forums here: [forums.wholehogsports.com](http://forums.wholehogsports.com)

Thank you for your time. Any suggestions would be helpful. I don’t have much experience with this so I appreciate any correction or clarification of my description.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [April 12, 2022, 6:13pm UTC](https://meta.discourse.org/t/open-id-connect-troubleshooting/224063/2 "2022-04-12T18:13:16Z")

</div>

> [@sports\_dev](#):
>
> For authorization we use a third-party vendor to check the cookies for the user’s email we’ve gotten from Auth0.

How exactly this works? If Auth0 write an HTTP-Only **and** cookie that third party cookie check is in JS it won’t work.

---

<div class="post-metadata">

### Author: ![sports\_dev](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@sports\_dev](https://meta.discourse.org/u/sports_dev)
#### Post date: [April 12, 2022, 6:21pm UTC](https://meta.discourse.org/t/open-id-connect-troubleshooting/224063/3 "2022-04-12T18:21:54Z")

</div>

Thank you for your response.  
I’m still researching how our third-party checks for the email, but are you saying that it won’t work with Javascript.

And I’m not sure what you mean by `HTTP-Only`

I appreciate you taking time to respond. I’m new to discourse and our process. Thanks for your patience.

---

<div class="post-metadata">

### Author: ![sports\_dev](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@sports\_dev](https://meta.discourse.org/u/sports_dev)
#### Post date: [July 28, 2022, 2:52pm UTC](https://meta.discourse.org/t/open-id-connect-troubleshooting/224063/4 "2022-07-28T14:52:39Z")

</div>

Just want to bump this to see if anyone might have a solution. Or maybe someone can show me something I’m obviously missing.
