I thought the `onlogin` callback was used either the login is triggered on popup/redirect/inline mode. As shown here:

![](https://cloudup.com/cW5DtEnXEny+)

That's what I got from `auth0.js`' API. Maybe I got it all wrong, but if not... we must think of a better way to achieve a consistent and coherent API.

Time invested on this will always be worthy IMHO.