I’m using Angular to authenticate users but I’m having trouble with the ‘send authentication code + client secret’ part of the PKCE flow. In particular, I’m getting a 403 when I post to the /token endpoint using angular. Also, I’m not doing any posting myself, I’m using the following method provided in @okta/okta-angular
I can also see the okta-oauth-nonce and okta-oauth-state cookies in the dev tools but no tokens (obviously, the request failed).
Could this be due to bad headers?
EDIT: Included form data:
Another idea: this could be due to no Issuer when instantiating the OktaAuthService:
Thanks for looking.