-
Notifications
You must be signed in to change notification settings - Fork 2
Closed
Labels
Description
Remove codeChallenge and codeChallengeMethod from OAuthAuthorizeOptions
Description
Because AppAuth is not supporting to use codeChallenge and codeChallengeMethod in the method used by OAuthAuthorizeOptions and there is no real use case which requires this we should remove it from the OAuthAuthorizeOptions.
Affects versions
<= v0.1.7
Steps to reproduce
For further details: #129 (comment)
2024-12-03 15:50:52.220 10482-10482 AndroidRuntime io.fusionauth.app E FATAL EXCEPTION: main
Process: io.fusionauth.app, PID: 10482
java.lang.IllegalArgumentException: Parameter code_challenge is directly supported via the authorization request builder, use the builder method instead
at net.openid.appauth.Preconditions.checkArgument(Preconditions.java:132)
at net.openid.appauth.AdditionalParamsProcessor.checkAdditionalParams(AdditionalParamsProcessor.java:62)
at net.openid.appauth.AuthorizationRequest$Builder.setAdditionalParameters(AuthorizationRequest.java:1050)
at io.fusionauth.mobilesdk.oauth.OAuthAuthorizationService.authorize(OAuthAuthorizationService.kt:97)
Community guidelines
All issues filed in this repository must abide by the FusionAuth community guidelines.
Additional context
In addition we might want to more clearly document the Authorization Code Grant Flow with PKCE.