What is the best way to do silent authentication in V4?

[gabor-at-reed]

Checklist

• The issue can be reproduced in the nextjs-auth0 sample app (or N/A).
• I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
• I have looked into the API documentation and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

Since the v4 release, I have been unable to find a way to perform silent authentication.

What's the recommended approach now to check the authorization server to see if the user has an active session?

Reproduction

I found 2 relevant issues from the past, but neither of these is working anymore:

• What is the best way to do silent authentication in V2? #1207
• Silent authentication without user interaction #44 (comment)

Additional context

No response

nextjs-auth0 version

4.6.0

Next.js version

15.3

Node.js version

22 - LTS

[gabor-at-reed]

@adamjmcgrath do you have any suggestions on this?

[collinschaafsma]

+1 we need this for SSO across our apps within our tenant. docs reference checkSession() but this is not available in the nextjs-auth0 sdk.

[Fixit2001]

This is my code:

return handleLogin(req, res, {
    authorizationParams: {
      audience: `${process.env['AUTH0_AUDIENCE']}`,
      organization: params.get('organization') ?? '',
      // prompt: 'none',
      max_age: 0,
      force: true,
    },
    returnTo: params.get('returnTo') || '/',
  });

The login process is working for me when I'm commenting the prompt option.
With the prompt set up I get: login_required error.

[gabor-at-reed]

This is my code:

return handleLogin(req, res, {
authorizationParams: {
audience: ${process.env['AUTH0_AUDIENCE']},
organization: params.get('organization') ?? '',
// prompt: 'none',
max_age: 0,
force: true,
},
returnTo: params.get('returnTo') || '/',
});
The login process is working for me when I'm commenting the prompt option. With the prompt set up I get: login_required error.

In the source code, I checked the handleLogin().

Two things:

• it has only req param, but no res
• in the authorizationParams, there is no option for force

I tried it anyway with startInteractiveLogin(), which is called by handleLogin(), but it doesn't work. I mean, it never goes directly to Auth0 for fresh data, regardless of the force: true setting. It always comes back with the "cached" session data.

/cc @tusharpandey13