Pain point · Integrations · Causes churn
OAuth redirect no longer includes the access token
1 source thread · first seen 2026-09
Summary
After upgrading to Strapi 5.53.0, the OAuth provider redirect no longer passes access_token to the frontend, despite the documentation describing that parameter. This breaks the documented frontend flow for obtaining a Strapi user's JWT.
- Affects
- Teams using Users & Permissions OAuth providers with a frontend application
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Strapi no longer passes `access_token` from an OAuth provider back to the frontend application”