Skip to content

Remove codeChallenge and codeChallengeMethod from OAuthAuthorizeOptions #130

@Aaron-Ritter

Description

@Aaron-Ritter

Remove codeChallenge and codeChallengeMethod from OAuthAuthorizeOptions

Description

Because AppAuth is not supporting to use codeChallenge and codeChallengeMethod in the method used by OAuthAuthorizeOptions and there is no real use case which requires this we should remove it from the OAuthAuthorizeOptions.

Affects versions

<= v0.1.7

Steps to reproduce

For further details: #129 (comment)

2024-12-03 15:50:52.220 10482-10482 AndroidRuntime          io.fusionauth.app                    E  FATAL EXCEPTION: main
Process: io.fusionauth.app, PID: 10482
java.lang.IllegalArgumentException: Parameter code_challenge is directly supported via the authorization request builder, use the builder method instead
   at net.openid.appauth.Preconditions.checkArgument(Preconditions.java:132)
   at net.openid.appauth.AdditionalParamsProcessor.checkAdditionalParams(AdditionalParamsProcessor.java:62)
   at net.openid.appauth.AuthorizationRequest$Builder.setAdditionalParameters(AuthorizationRequest.java:1050)
   at io.fusionauth.mobilesdk.oauth.OAuthAuthorizationService.authorize(OAuthAuthorizationService.kt:97)

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Additional context

In addition we might want to more clearly document the Authorization Code Grant Flow with PKCE.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions