Skip to content

Incident detail

Aura Console Auth error

Resolved incidentMajor1 affected service

Timeline window

to

Outage alerts

Get alerted the next time Neo4j Aura breaks

Free email alerts for up to 5 providers — no card, live in about a minute. Paid plans add Slack, Discord, and webhook delivery across your whole stack, plus higher API quotas.

Timeline

Incident updates

Updates are normalized from the official source chronology so timeline changes remain easy to scan.

  1. Investigating

    Aura Console is currently not accessible. Our team is investigating the issue.

    Aura instances are running normally and are not impacted. They remain accessible via https://browser.neo4j.io/ and https://bloom.neo4j.io/

    Console-related administration and configuration procedures may be unavailable.

    We will provide updates as soon as more information is available.

  2. Monitoring

    The Aura Console issue has now been resolved.

    The root cause was a failure while fetching public certificates from Auth0. We are reaching out to the Auth0 team to gather more detailed information about the incident.

  3. Resolved

    This incident has been resolved.

  4. Resolved

    What Happened

    During the incident window, users attempting to log in to the Aura Console were unable to do so. Auth0, the authentication provider for Aura Console, experienced an issue that prevented new authentication requests from completing. Existing sessions with valid cached tokens were largely unaffected. Aura database instances were running normally throughout and were not impacted, and access via the Aura API to database instances was also unaffected.

    How the service was affected

    Authentication requests from the Aura Console to Auth0 began failing, preventing new logins and session refreshes. Affected users received 503 errors when accessing the Aura Console. Once Auth0 recovered, access was restored.

    What are we doing now

    We've made two changes as a result of this incident:

    • Client identification: Authentication requests now include a clearer client identifier, reducing the chance of requests being incorrectly blocked in the future.
    • Observability: We've improved logging and alerting for authentication failures, including better visibility into errors from external services,so we can detect and escalate issues like this faster.