Next-auth downloading files on sign in | Next.js | Page 1

half bane Mar 29, 2024, 5:21 PM

#

Hi Everyone,

I have a client who's been happily using an app I wrote that uses Next-Auth for several months. We recently sent them updated source code after we made some changes to the code so they could build/deploy locally (his INSIST on doing it this way).

Today, I got an email saying that their security team is blocking it because it calls next-auth-js.org to download a bunch of files when someone tries to log in. I can't replicate this behavior locally, but my client thinks I have the files cached locally. I used private mode on my browser and didn't see the downloads happening.

Does anyone know why these are downloading and how I can stop it? My client suggested that I download the files and then update the app to use the local versions, but frankly, I'm not sure how I would do that.

Any other suggestions would be greatly appreciated. Thanks!

hybrid pantherBOT Mar 29, 2024, 5:21 PM

#

Post created!

🔎 This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord

🕵️ Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Profile" role in id:customize

✅ You can mark a message as the answer for your post with Right click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)

nova ermine Mar 29, 2024, 8:43 PM

#

ask client to provide this requests breakdown. because by default next-auth don't make any external requests. more likely they just misunderstood some local requests.

half bane Mar 30, 2024, 10:44 AM

#

nova ermine ask client to provide this requests breakdown. because by default next-auth don'...

nova ermine Mar 30, 2024, 1:07 PM

#

half bane Here are the calls they are seeing go out over the API: authjs.dev/img/providers...

telemetry.nextjs.org/ - this one telemetry of nextjs can be disabled https://nextjs.org/telemetry
next-auth.js.org/img/logo/logo-xs.png,authjs.dev/img/providers/azure.svg this ones can be loaded from external domains it's provider icons

But most of this files from next-auth.js.org domain itself, like main page of it's domain, and they doesn't make sense, because next-auth don't have any telemetry or hidden iframes.
they should also describe situation when this requests are happening, or ideally provide video of where they catch them

#Next-auth downloading files on sign in