The nonce validation stoped to work about wordpress HOT 5 CLOSED

Many more. A disabled the WP-Rocket (cache) and Wordfence (security) and the problem persists, but there are many others. I'll try to disable all of then but Auth0 to revalidate.

from wordpress.

In some way the Auth0 plugin is interfering on nonces validation.

The plugin doesn't intercept any nonce validation logic

I deactivated the option "rolling sessions" and seems to get the job done.

Great! Glad you found a workaround 👍

from wordpress.

Hi @bruno-barros 👋 Do you have any other plugins enabled, aside from Auth0?

from wordpress.

Hi. I disabled every plugin but Auth0.
I loggued in with Auth0.
When the heartbeat try to validate any request:

interval: 60
_nonce: cb3c6a7ad0
action: heartbeat
screen_id: toplevel_page_auth0
has_focus: true

It returns:

heartbeat_nonce: "fd21dfbefb",
nonces_expired: true,
rest_nonce: "c8458e437e",

So, I disable the Auth0 plugin too and the problem validating nonces was gone. I did it without logout and login again.

Can you give some hint to where to look at? In some way the Auth0 plugin is interfering on nonces validation.

from wordpress.

I deactivated the option "rolling sessions" and seems to get the job done.

from wordpress.