workos-convex-debug

WorkOS AuthKit returns a null identity during Convex sign-in when JWT validation fails due to missing claims or incorrect provider configuration in auth.config.ts. Diagnose by verifying environment variables and ensuring the WorkOS dashboard JWT template is correctly configured.

Fix missing email claims in Convex WorkOS authentication by validating the JWT template configuration in the WorkOS dashboard and checking that the deployed Convex auth.config.ts correctly maps identity fields. Frontend and backend logging helps surface the root cause of the missing fields.

WorkOS AuthKit with Convex requires VITE_WORKOS_CLIENT_ID, VITE_WORKOS_REDIRECT_URI, and WORKOS_CLIENT_ID. These environment variables must be correctly set across local development and Netlify or Convex production setups to prevent sign-in failures and OAuth callback errors.

Troubleshoot WorkOS OAuth callback problems in Netlify and Convex by verifying the VITE_WORKOS_REDIRECT_URI matches the production domain, confirming environment variables are deployed, and validating the Convex auth.config.ts multiple providers setup against the WorkOS dashboard configuration.

Yes, WorkOS admin checks in Convex require a correctly deployed auth.config.ts supporting multiple providers. When admin checks fail, validate the JWT validation logic and ensure the WorkOS dashboard JWT template includes the necessary role or identity claims.

Debug JWT validation errors with WorkOS AuthKit and Convex by applying frontend and backend logging strategies to surface root causes. Validate the WorkOS dashboard JWT templates, check environment variables, and confirm the deployed Convex auth.config.ts matches the expected provider configuration.