Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to authorize using PKCE #158

Closed
TheZorkij opened this issue Aug 31, 2022 · 2 comments
Closed

Unable to authorize using PKCE #158

TheZorkij opened this issue Aug 31, 2022 · 2 comments

Comments

@TheZorkij
Copy link

The Code Verifier sent by the app in the token request does not produce a valid Code Challenge. Here is both:
Code Verifier:
/0T2nBJfBvLbytrymN6TVBNmupxqUEYd4oSJO11MYH9FwZsmE0WUwXHU5oVOwq8QbPZAl1S0vJp9FmCWSYPJmaoI3J8762QkXB+dRywfMFCYG5e1+wFpEYB6W2q7xC6O

Code Challenge from the authorization request:
jFtUhY/me1ri0Y5qAMJN7TbBpkpTKqSmbabxzkxO3 k=

RFC7636 says that a Code Verifier must only contain unreserved characters [A-Z] / [a-z] / [0-9] / "-" / "." / "_" / "~" but this one contains '+' and '/' which can't be right?

@vlad-ignatov
Copy link
Collaborator

Correct, a fix is coming soon...

@vlad-ignatov
Copy link
Collaborator

Should be fixed in fhirclient@2.5.2. Please re-open if you have further issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants