5,599 questions
Advice
0 votes
1 replies
24 views
Silent SSO with Auth0 in legacy Spring MVC (SSR) app with LDAP login and Spring Security 5
How to implement Auth0 Universal Login + Silent SSO + SLO in a legacy Spring MVC (SSR) app? Can the Auth0 SPA SDK be used? I have a legacy Spring MVC (server-side rendered) application using: Spring ...
Best practices
0 votes
0 replies
31 views
How to Serve Multiple SPAs from One Azure Storage Account Using Cloudflare
I need guidance on how to manage traffic from multiple custom domains in Cloudflare (non-Enterprise plan) to a single Azure Storage Account that hosts multiple SPAs — each served under a different ...
0 votes
2 answers
125 views
Angular + Nginx: some users get Unsupported Content-Type "text/html" loading chunk-*.js after deploy (chunk URL serves index.html)
Problem After a deploy, a subset of users can’t load the app. For them, a specific old chunk URL (e.g. chunk-B3EQFA6E.js) returns index.html with Content-Type: text/html instead of JavaScript. That ...
0 votes
1 answer
38 views
Microsoft Graph scopes are not showing up in the access token my API receives
We have a SPA with an associated API back end. The user is authenticating fine against Azure Entra, and I can access the API as well. This is an internal app, and I want to know more about the user. ...
0 votes
1 answer
52 views
Browser back button exits Single Page App despite pushState() on Chrome only
I’m working on a legacy single-page application that uses AJAX to load different internal views. After recent browser updates the Browser Back Button stopped behaving as expected. The current problem: ...
0 votes
0 answers
48 views
How do I get my SPA application authentication to return the correct audience?
We have a React SPA web application and a .Net Core API back end. I have a registrations set up for the SPA and the API. I've read and followed a number of different articles about this problem and I'...
1 vote
0 answers
120 views
GA4 (gtag.js) SPA – custom events overwrite virtual page params with homepage unless I pass page_*. How to persist page context?
I have a single-page app. I send virtual pageviews on route change via gtag.js. On each client-side route change I do (for example): document.querySelector('.button-news').addEventListener('click', ...
0 votes
2 answers
65 views
SvelteKit form inside a modal won’t submit to +page.server.js action
So I have a SvelteKit project with the following project structure: lib/ ├─ components/ │ └─ my_module/ │ └─ my_resource/ │ ├─ CreateObjectButton.svelte ← Button component (important by ...
0 votes
1 answer
86 views
How can I build and publish a SPA web application in Azure Devops?
We have built a React SPA web application with an ASP.NET Core Web API. The SPA and the backend are both in the same solution. So far this hasn't caused any issues running locally. When I created the ...
0 votes
0 answers
47 views
Current standard for implementing a username + password login for a web application
After a few years of working at the back of the backend, I'm back working on a full-stack project. We need a username + password login with MFA which I'll use a TOTP for. There will be no third-party ...
0 votes
1 answer
125 views
Public clients should not validate ID tokens
I noticed that when using OIDC (hybrid or implicit flow) with Azure Identity, the Authorization Code with PKCE is only used for access tokens, not id tokens. An id token is directly returned in the ...
1 vote
0 answers
49 views
Avoid duplicated base URL when serving Vue SPA index.html locally and assets from CDN via Nginx
I’m hosting a Vue.js single-page application using history mode routing. The app’s static assets (JavaScript, CSS, images) are stored on DigitalOcean Spaces CDN, with the Vue app’s publicPath ...
0 votes
1 answer
117 views
protect laravel 12 api routes using middleware
I have an SPA in Laravel 12 using vue and Sanctum for auth. I want to create a middleware to protect the the api routes /api/admin/* I have created a middleware Admin.php public function handle(...
0 votes
0 answers
45 views
Browser extension fails to reliably update favicon on SPA pages despite correct <link rel="icon"> in DOM
I’m developing a browser extension that changes the favicon on a Single Page Application (SPA).. specifically Roblox.com. The extension injects code to replace the existing favicon with a custom SVG ...
0 votes
0 answers
30 views
Vue.js served throught ASP.NET Core spa proxy is not served on API URL
I've created a new project using Vue.js SPA template of Visual Studio. It has created a server project using ASP.NET Core, and a client project using Vue. In the program.cs of the server I have this ...