Invalid State error on a fresh install

[webkraftz]

Checklist

• I have looked into the Readme and the documentation, and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

Hello,
I have a fresh install of WordPress with PHP version 8.3. I have disabled all caching plugins and also disabled caching on the server level. I have installed the latest Auth0 plugin from GitHub and followed all the steps in the troubleshooting document on Auth0 and i still don't have success.
I have created a user manually in WordPress as we don't want Auth0 creating new users due to our signup flow.
I am able to login using the Auth0 universal login and create a user in Auth0 but this user is not able to access the password protected pages. The error log shows "Invalid State". If i turn on create user in the plugin then everything works fine.

Reproduction

1. Install fresh version of WordPress with PHP v8.3
2. Install Auth0 plugin from github
3. Disable all cache plugins on WordPress and server level
4. Create a user on WordPress
5. Enable universal login on Auth0
6. Login with the user in WordPress
7. User gets created in Auth0
8. User is not able to see the restricted pages
9. Error log shows Invalid state
10. There is no user created in Auth0 tables in WordPress.

Additional context

No response

wp-auth0 version

5.2.1

WordPress version

6.8

PHP version

8.3

[webkraftz]

The issue is with custom database script, nowhere in the documentation its mentioned that we should return an field email.verified = true. this is the reason Auth0 wordpress plugin tries to create a new user when it does not find a verified email.
We need a setting to disable this check.