I think the IP is required for hot loading. However, I do think there’s a need to be able to assume a domain or localhost to make a Google OAuth whitelist work. Tried a bunch of approaches without any luck.

Perhaps this is just a need to work out Google OAuth whitelisting in dev mode.

@dobbel It fails in dev mode. I haven’t checked production mode, but I will and report my results.

I created a PWA with Auth0 integration. Now I’m creating a Capacitor-based mobile application from the PWA, but Auth0 fails with a “auth0-spa-js must run on a secure origin” error. Although I see Auth0 documentation for Cordova integration, I don’t see anything for Capacitor…and what little community support I see takes the form of Ionic or direct API calls. There are one or two poorly supported NPM packages out in the wild that appear to bridge this gap, but they don’t look particularly promising.

Can anyone assist? Many thanks.