App session launcher invalid session request NF_IP

[kevinsallee]

Hi, I’m working on a web application that uses the app session launcher for the users to authenticate to a Flow PT website. Our web application is hosted on Vercel and the session oauth flow is started from the Vercel servers.

With my test Flow PT sites and for a few beta testers, there is no issue whatsoever. But for one particular beta tester, every time he tries to start the oauth flow, he gets a Invalid session request (NF-IP) error.

We tried to troubleshoot by trying the session launch with different users, Operating systems, network locations. I even tried from my host machine, to see if it was location related.

But invariably, it’s failing the oauth process for his website.

Do you have any information about why it would fail?

Thanks

[Ricardo_Musch]

Hey Kevin!

Just a hunch but have you looked at the site settings?
There is a setting for the App Session Launcher (Site Settings → Security) that determines if the link can be copied and used in another browser or not.

Since you say that the oauth flow starts elsewhere, perhaps whatever happens is perceived as a browser change or something?

[kevinsallee]

Good catch, it’s the middle one, IP address enforcement! thanks!