Unable to Login via IndieAuth - PKCE Issue?

indieweb / wordpress-indieauth

IndieAuth for WordPress

https://wordpress.org/plugins/indieauth/

MIT License

31 stars 11 forks source link

Unable to Login via IndieAuth - PKCE Issue? #262

Open dshanske opened 10 months ago

dshanske commented 10 months ago

https://lostfocus.de/2023/12/31/231932/#IndieAuth

@lostfocus Can you elaborate?

lostfocus commented 10 months ago

I'm getting {"error":"invalid_grant","error_description":"Failed PKCE Validation"} with an HTTP 400. It's probably something weird happening when creating the code challenge on the non-WP-side. I'm not sure yet, though, I just got back home today.

dshanske commented 10 months ago

@lostfocus I recently fixed a bug that if you were using PKCE, it wasn't properly passing the PKCE parameters for validation, so it was treating it like no PKCE. Could be it never really worked.

lostfocus commented 10 months ago

Yes, it's 99% likely a client issue and not one of this plugin.