Provider
Neo4j AuraIncident detail
Aura Console Auth error
Timeline window
to
Outage alerts
Get alerted the next time Neo4j Aura breaks
Free email alerts for up to 5 providers — no card, live in about a minute. Paid plans add Slack, Discord, and webhook delivery across your whole stack, plus higher API quotas.
Timeline
Incident updates
Updates are normalized from the official source chronology so timeline changes remain easy to scan.
Investigating
Aura Console is currently not accessible. Our team is investigating the issue.
Aura instances are running normally and are not impacted. They remain accessible via https://browser.neo4j.io/ and https://bloom.neo4j.io/
Console-related administration and configuration procedures may be unavailable.
We will provide updates as soon as more information is available.
Monitoring
The Aura Console issue has now been resolved.
The root cause was a failure while fetching public certificates from Auth0. We are reaching out to the Auth0 team to gather more detailed information about the incident.
Resolved
This incident has been resolved.
Resolved
What Happened
During the incident window, users attempting to log in to the Aura Console were unable to do so. Auth0, the authentication provider for Aura Console, experienced an issue that prevented new authentication requests from completing. Existing sessions with valid cached tokens were largely unaffected. Aura database instances were running normally throughout and were not impacted, and access via the Aura API to database instances was also unaffected.
How the service was affected
Authentication requests from the Aura Console to Auth0 began failing, preventing new logins and session refreshes. Affected users received 503 errors when accessing the Aura Console. Once Auth0 recovered, access was restored.
What are we doing now
We've made two changes as a result of this incident:
- Client identification: Authentication requests now include a clearer client identifier, reducing the chance of requests being incorrectly blocked in the future.
- Observability: We've improved logging and alerting for authentication failures, including better visibility into errors from external services,so we can detect and escalate issues like this faster.