Hi I have defined an application in okta, which its “Client authentication” is “Use PKCE”. I have defined this “SecurityDefinition” in swagger of my asp.net core app : options.AddSecurityDefinition("OAuth2", new OpenApiSecurityScheme { Type = SecuritySchemeType.OAuth2, …

is the code challenge correctly included in the request ? the code_challenge and code_challenge_method parameters need to be passed if the PKCE extension is used and the browser developer tools will show if these are indeed included and correctly set

No code_challenge nor code_challenge_method is passed to request. [okta]

Asp .net core, Swagger and OAuth2

Questions OAuth/OIDC

bfakhriloo March 5, 2021, 8:18pm 4

Please see this Okta for .net and configure swagger to use Implicit returns different issuer

Post		Replies	Views
Unable to generate Access Token for my application using Swagger dotnet core Questions	3	3943	December 24, 2020
Swagger with SPA (Angular + .Net) OAuth/OIDC dotnet , angular	3	135	April 23, 2025
Okta for .net and configure swagger to use Implicit returns different issuer OAuth/OIDC dotnet , api	1	6139	March 5, 2021
Browser requests to the token endpoint must use Proof Key for Code Exchange OAuth/OIDC dotnet	2	621	May 31, 2024
Web Application requiring PKCE Questions	1	6284	March 4, 2020

Asp .net core, Swagger and OAuth2

Related topics