-
Notifications
You must be signed in to change notification settings - Fork 231
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DefaultPKCEProvider challenge rejected #1373
Labels
priority: p2
Moderately-important priority. Fix may not be included in next release.
Comments
Looks like the issue is padding. PKCE spec calls for having the padding stripped (https://www.rfc-editor.org/rfc/rfc7636#appendix-A) whereas the URL generated with the DefaultPkCEProvider has padding included (the trailing %3D in the challenge):
|
And verified that removing the padding fixes the issues:
|
@clundin25 Could you please take a look, maybe applies to other langs? |
TimurSadykov
added
the
priority: p2
Moderately-important priority. Fix may not be included in next release.
label
Mar 7, 2024
clundin25
added a commit
to clundin25/google-auth-library-java
that referenced
this issue
Mar 11, 2024
4 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Environment details
Steps to reproduce
Code example
Stack trace
None. Error is when attempting authorization, fails with error:
Access blocked: Authorization Error
Code Challenge must be base64 encoded. Learn more about this error
External references such as API reference guides
https://www.rfc-editor.org/rfc/rfc7636
Any additional information below
Following these steps guarantees the quickest resolution possible.
Thanks!
The text was updated successfully, but these errors were encountered: