OAuthError:The client specified not to prompt, but the user is not logged in

Questions OAuth/OIDC
1

Getting this issue when I try to renew access token. When token expires and request is made for renew, then this error comes up. Using @okta/okta-react and @okta/okta-auth-js plugins. This is happening across all browsers and devices contrary to what I see in other similar posts. Also want to understand if there is any specific config that I need to setup for this.

Note that login flow is working absolutely fine, this occurs when I renew the token. MFA is enabled as well.

2

At the time of this error happening, has the user’s Okta session also expired? Does your application request and use Refresh Tokens to keep users logged in?

This sounds like the same issue discussed here:

The only difference between your scenario and the one outlined here is that this error is happening because the user doesn’t have an Okta session in their browser anymore and that they needed to be prompted to fully authenticate, not just complete an MFA challenge.

3

Thanks for the reply.
Few things I want to highlight here,
I am not using autoRenew or ‘offline_access’. I am handling token renewal manually with okta-react and user 's okta session is active. Also later I tried to setup a developer edition account with the same rules as it were there in the organization’s. So there I was able to renew it. Therefore, I think there is some config in Okta side that is causing this issue. Is there something that gets changed with the type of accounts.

4

The renewTokens method itself actually has a case where it will try to rely on the Okta session if not Refresh Tokens are available, which I imagine you are using and is what autoRenew uses as well.

You can see it calls getWithoutPrompt in its code here:

export async function renewTokens(sdk, options?: RenewTokensParams): Promise<Tokens> {
  const tokens = options?.tokens ?? sdk.tokenManager.getTokensSync();
  if (tokens.refreshToken) {
    return renewTokensWithRefresh(sdk, options || {}, tokens.refreshToken);
  }
...
...
...
return getWithoutPrompt(sdk, options)
    .then(res => res.tokens);