If you’re using java, you should be using the authorization code flow.
We have sample code in java spring that demonstrates this flow here - https://github.com/okta/samples-java-spring-mvc
I am having the same error and still not figuring out why even with your advice. I’ve followed this guide but still error 404 “The ‘redirect_uri’ parameter must be an absolute URI that is white-listed in the client app settings”. I’ve correctly routed the login callback url to “http://localhost:4200/implicit/callback” (indeed when i manually connect to it it says “AuthSdkError: Unable to parse a token from the url”), added the url on the login application and white-listed “http:\localhost:4200” inside “Trusted Origins” menu. Any idea?
It is correct in the dev panel, it was a typo in the post but i couldn’t fix it because i can only add 2 links in a single post and there were already 2.
In the GET parameters, the redirect_uri is incorrect “https://http://localhost:55735/callback/”. Also, the URL must match the one that you have under General tab >> Login Redirect URIs, which, in the screenshot provided, is “http://localhost:55735/my-app/signin.html/”
Another issue that I see is that you are requesting both id token and authorization code. When passing the authorization code to /token endpoint, you will receive both id token and access token from Okta.
After doing the modifications, the URL should look like the following
If we access it, it will still give an error. Please check to see if the client_id that is present in the URL matches the one that you have for the application presented in the screenshot.