Stuck at code verification stage after leaving page idle for more than a minute

[pd-sgdev1]

trafficstars

Hi,

I have a Azure Web App using Microsoft as the identity provider (Authentication settings) - using the default web app authentication handler /.auth/login/aad/callback

I'm using the https://github.com/azure-ad-b2c/samples/tree/master/policies/signin-email-verification as my base for my custom policy. Just noticed after code verification and you leave the page idle for at least 2 minutes, then hit continue it goes back to the code verification screen but the e-mail address is left blank.

It seems the azure web app auth handler (/.auth/login/aad/callback) redirects back the user to the authorize endpoint. I suspect the handler expects the auth response within a minute. Any auth response after that is treated as no longer valid thus redirecting the user back to the authorize endpoint (in B2C).

BEFORE (AFTER CODE VERIFICATION)

AFTER CLICK CONTINUE

---

Anyone encountered before? Appreciate any feedback and suggestions.

Thanks