Solutions to common issues with user login, roles, and access control.
A user logged in but doesn't appear in my admin panel
New users are registered the first time they log in. If a user logged in but doesn't appear in your user list, a few things could be happening:
- The user didn't complete login. Internet Identity can time out or be dismissed before completing. Ask them to try again.
- Your admin panel isn't refreshing automatically. Try refreshing the page. If the user still doesn't appear, describe the issue in the chat: "The user list in my admin panel doesn't update when new users log in — please fix the refresh behavior."
A user can access something they shouldn't be able to
If a user can reach admin-only or user-only features without the appropriate role, the access control guard on that function may be missing or incorrect. Describe the problem specifically in the chat:
- "Regular users can access the admin dashboard — they should be blocked"
- "Logged-out visitors can see the members-only section — it should require login"
The AI will add or fix the access control on the next build.
An admin can't perform an admin action — they get an error
If an admin is blocked from doing something they should be able to do, the function may be guarded too strictly, or there may be a bug in the role check. Describe it in the chat: "My admin gets an error when trying to delete a post — they should be allowed to do this."
I want to remove a user from my app
The standard authorization system stores all users who have ever logged in. There is no automatic way to delete a user account — the AI generates a user list with role management, but deletion is not part of the default setup.
If you need the ability to remove or ban users, ask the AI: "Add a way for admins to remove users from the app entirely" or "Let admins ban users so they can no longer access the app."
I need more than three roles
The built-in role system has admin, user, and guest. If your app needs finer-grained roles — for example, separate editor and viewer roles, or department-level permissions — describe what you need in the chat. The AI can build a custom role system on top of the standard one.
Examples:
- "Add an editor role that can write posts but not publish them — only admins can publish"
- "Create a moderator role with permission to delete comments but not manage users"
Users are being logged out unexpectedly
Internet Identity sessions expire after a period of inactivity. This is controlled by the Internet Identity service, not by your app. If users are being logged out more frequently than expected, it is likely the Internet Identity session expiry rather than a bug in your app.
If logout is happening on every page refresh (i.e. the session is not persisting at all), describe the issue in the chat: "Users are getting logged out every time they refresh the page."
Login opens a popup that gets blocked by the browser
The Internet Identity login flow opens in a popup. If the popup is blocked:
- The user should allow popups from your app's domain in their browser settings.
- Most browsers show a notification in the address bar when a popup is blocked — the user can click it to allow the popup and proceed.
I want users to be able to log in without Internet Identity
Internet Identity is the only built-in authentication method for Caffeine apps. Username/password login and social login (Google, GitHub, etc.) are not currently supported by the platform.