OIDC with React Failing

Questions OAuth/OIDC
1

I tried to configure Okta using OIDC Method. For my developer account, we didn’t have any client secret but when we used the company Okta domain they have a client secret key. And when I log in I am getting this error:

“Browser requests to the token endpoint must use Proof Key for Code Exchange.”

I tried to add a client secret in the oAuth config then I am getting this error

“Client authentication failed. Either the client or the client credentials are invalid.”

Please HELPPP

2

Hello,

The /token endpoint can’t be called from a browser (xhr request) and supply a client secret.
Public OAuth applications (apps where the browser makes the token call) should be using auth code + PKCE instead.

Thank You,

2 Likes