Auth0 SNI Announcement

Dear gridX Integrators :waving_hand:

If your app or service does not call the gridX Auth0 instance, namely https://gridx.eu.auth0.com, feel free to stop reading here. If you do, please bear with me.

Situation

From a yet-to-be-defined future date, Auth0 will require clients to use SNI (Server Name Indication) for TLS connections in the EU region. If clients don’t make use of SNI, connection attempts will fail.

Actions

If you’re interacting with gridX’s Auth0 API at https://gridx.eu.auth0.com, make sure to verify that SNI is set on your outgoing requests. Modern runtimes (like recent versions of the JVM-languages, Go, Python, …) should handle this correctly and automatically for you. However, to make sure you won’t get locked out, please verify on your end.
For Frontends, there isn’t much that can be done as the browser will handle SNI. If end-users reach out that they cannot login anymore, the only course of action may be that they will have to upgrade their browser. See below for a list of browsers that support SNI. TL;DR: Anything past 2011 and not on Windows XP should be fine.

Impact

Failing to provide SNI in requests to Auth0 will result in rejected connections. This will result in no tokens being issued which in turn will make all your requests towards gridX fail. This could include your backend services as well as custom Frontend clients where your users might not be able to log in anymore.

Next Steps

  1. Verify on your end, that all your clients towards Auth0 (not the gridX API at api.gridx.de, but the Auth0 API at https://gridx.eu.auth0.com) add SNI.

  2. If you have insights into your custom Frontends (again, only the ones that talk to the gridX Auth0 instance), check the used browser versions to verify if and how many of your clients may be affected.

  3. Reach out to us in case of any questions.

Resources

Browser OS Version with SNI Support Initial Release Date
Internet Explorer Windows Vista and later 7 October 18, 2006
Windows XP No support N/A
Mozilla Firefox Windows, macOS, Linux 2 October 24, 2006
Google Chrome Windows Vista and later, macOS 5.0.342.1 May 25, 2010
Windows XP 6 September 2, 2010
Opera Windows, macOS, Linux 8 Windows, macOS, Linux
Safari macOS 2.1 February 12, 2007
Windows 2.1 February 12, 2007
Mobile Safari iOS 4 June 21, 2010
Windows Phone Windows Phone 7 October 21, 2010
Android Browser Android 3.0 (Honeycomb) February 22, 2011
3 Likes