I added a SPA application in my sandbox. As below are steps I tried to retrieve access token: Primary auth to get a sessionToken and I can get sessionToken successfully a. POST to {{url}}/api/v1/authn b. Post body: { “username”: “{{username}}”, “password”: “{{password}}”, “options”: { “mul…

Quoting @andrea from a previous question [image] Getting a 403 when attempting to exchange an authorization code for an access token OAuth/OIDC In case anyone else is encountering this issue, the /token endpoint is returning a 403 because a CSRF check is failing. When a co…

Are you making these calls manually? What framework are you using? Our SDKs might be able to make this a lot easier for you. In the meantime, this blog post might help. [image] Implement the OAuth 2.0 Authorization Code with PKCE Flow This tutorial shows you how to migrate from the OAuth …

SPA Application get access token with code and PKCE got 403 response

Questions

julian May 21, 2020, 11:28pm 4

Thanks guys! Clearing cookie did the magic.

Post		Replies	Views
Getting a 403 when attempting to exchange an authorization code for an access token OAuth/OIDC	19	16972	February 4, 2020
POST 403 error (AuthApiError) at /token endpoint Questions	1	3832	August 4, 2020
How can I exchange a sessionToken for an AccessToken in the backend for an application/client with PKCE Questions	8	6345	June 30, 2020
Unable to generate Access Token for my application using Postman OAuth/OIDC	3	9389	April 26, 2019
PKCE token without a browser returns 405 for GET (following tutorial from support) Questions	3	3420	October 9, 2021

SPA Application get access token with code and PKCE got 403 response

Related topics