# Unsupported\_response\_type Issue

**URL:** <https://devforum.okta.com/t/unsupported-response-type-issue/21464>\
**Category:** OAuth/OIDC\
**Created:** [August 3, 2022, 12:30pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464 "2022-08-03T12:30:41Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 3, 2022, 12:30pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/1 "2022-08-03T12:30:41Z")

</div>

Dear team,

I am trying to integrate okta in swagger ui ,  
and facing given below issue:  
Auth Error{“state”:“V2VkIEF1ZyAwMyAyMDIyIDA3OjU0OjUzIEdNVC0wNDAwIChFYXN0ZXJuIERheWxpZ2h0IFRpbWUp”,“error”:“unsupported\_response\_type”,“error\_description”:“The+response+type+is+not+supported+by+the+authorization+server.+Configured+response+types:+[code].”}  
I am struggling to get solution for above error, my details are as below:  
Client ID :0oa61mwiewsu2C2dl5d7  
GrantType :Authorization Code  
Apptpye: OIDC/Web App  
URL: [dev-33312866.okta.com](http://dev-33312866.okta.com)

, Hope to hear from you as our company looking to integrate okta as soon as possible to our 3 Api’s project.

prompt help will be highly appreciated.

Thanks  
Sunil Kumar

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [August 3, 2022, 11:59pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/2 "2022-08-03T23:59:26Z")

</div>

What response\_type do you see being sent in the /authorize request you’re making to Okta?

---

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 4, 2022, 5:34am UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/3 "2022-08-04T05:34:37Z")

</div>

response\_type=token

[https://dev-33312866.okta.com/oauth2/default/v1/authorize?response\_type=token&client\_id=0oa618cw81ObxRf2y5d7&redirect\_uri=](https://dev-33312866.okta.com/oauth2/default/v1/authorize?response_type=token&client_id=0oa618cw81ObxRf2y5d7&redirect_uri=)  
https%3A%2F%2Flocalhost%3A17472%2Fswagger%2Foauth2-redirect.html&scope=  
openid&state=VHVlIEF1ZyAwMiAyMDIyIDA5OjM0OjQ0IEdNVC0wNDAwIChFYXN0ZXJuIERheWxpZ2h0IFRpbWUp

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [August 4, 2022, 9:28pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/4 "2022-08-04T21:28:55Z")

</div>

If you are requesting the `token` response\_type, make sure you have the Implicit flow → Access token enabled for the application you made

---

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 5, 2022, 4:40am UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/5 "2022-08-05T04:40:53Z")

</div>

After enabling Access implicit, give below error coming

**Auth Error** {“state”:“RnJpIEF1ZyAwNSAyMDIyIDAwOjM3OjUyIEdNVC0wNDAwIChFYXN0ZXJuIERheWxpZ2h0IFRpbWUp”,“error”:“invalid\_request”,“error\_description”:“The+‘nonce’+parameter+is+required+for+authorize+requests+with+either+the+‘id\_token’+or+‘token’+response+types…”}

That is not working.

Kindly requested to share working Swagger implementation in .net core sample code.

---

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 5, 2022, 9:13am UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/6 "2022-08-05T09:13:31Z")

</div>

Kindly give some solution for this, as we are first looking to integration okta oauth2 to in swagger ui

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [August 5, 2022, 3:09pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/7 "2022-08-05T15:09:49Z")

</div>

Now you need to make sure you include a nonce in your /authorize request, see our [docs](https://developer.okta.com/docs/reference/api/oidc/#authorize) for more details about required parameters for the /authorize endpoint.

---

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 8, 2022, 11:33am UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/8 "2022-08-08T11:33:02Z")

</div>

Hi Andrea, thank you for your suggestion,

Am passing nonce values as blank, that is working fine, but after authorization, not getting authorize button as locked for api’s end point in swagger, sharing screenshot

 ![SwaggerIssue](https://global.discourse-cdn.com/oktadev/original/2X/7/73467b16abf91af7533512531b1b3d216d0c09b4.png)

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [August 8, 2022, 3:56pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/9 "2022-08-08T15:56:51Z")

</div>

not sure I understand, whats not working now? Are you getting an error from the /authorize request?

---

<div class="post-metadata">

**Author:** ![skumar](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@skumar](https://devforum.okta.com/u/skumar)\
**Post date:** [August 9, 2022, 9:10am UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/10 "2022-08-09T09:10:18Z")

</div>

Does, need to pass nonce as blank?

---

<div class="post-metadata">

**Author:** ![abole](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/abole/32/3030_2.png) [@abole](https://devforum.okta.com/u/abole)\
**Post date:** [October 9, 2022, 12:53pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/11 "2022-10-09T12:53:01Z")

</div>

The API specs are good to know what you need to pass to Okta APIs [OpenID Connect & OAuth 2.0 API | Okta Developer](https://developer.okta.com/docs/reference/api/oidc/#request-parameters)

For the swagger app, does it have any logs (or js console debug output) to show you what’s going wrong?

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 12, 2024, 10:11pm UTC](https://devforum.okta.com/t/unsupported-response-type-issue/21464/12 "2024-02-12T22:11:01Z")

</div>


