search

SijuKJ / desktopoauth2.0

MIT License
5 stars 2 forks source link

Fix Issue #2 #4

Open kinga112 opened 10 months ago

kinga112 commented 10 months ago

Fix Issue #2

When user forces pkce=false, _fetchAccessToken will pass clientSecret in tokenReqPayload, which avoids failure. I found that leaving pkce=true/not declaring pkce is also successful when passing clientSecret through.

kinga112 commented 10 months ago

pkce will need to be forced false. desktopAuthCodeFlow.pkce = false;