Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Switching users in OAuth2 auth flow ends with unsuccessful authorization #3509

Closed
jesmrec opened this issue Jan 19, 2022 · 2 comments
Closed

Comments

@jesmrec
Copy link
Collaborator

jesmrec commented Jan 19, 2022

Steps to reproduce

  1. Open OAuth2 server session
  2. Open drawer -> manage accounts
  3. Click on the key icon to edit the account auth info
  4. Log In to start web authorization
  5. Select Switch users
  6. Enter correct credentials (same account as 1.)
  7. Authorize

Actual behaviour

Unsuccessful authorization

device-2022-01-19-165647.mp4

Error is a 400 after requesting POST http://192.168.1.20:39000/index.php/apps/oauth2/api/v1/token:

{
    "error": "invalid_grant",
    "error_description": "code verifier invalid"
}

Expected behaviour

As the correct credentials, file list should be displayed instead of error

Nexus 6P Android7
Pixel2 Android11
HuaweiP20L Android9

@michaelstingl
Copy link
Contributor

Known limitation, after oC10 OAuth 2.0 app learned PKCE with 5.0. See owncloud/oauth2#309

@jesmrec
Copy link
Collaborator Author

jesmrec commented Jun 30, 2022

Expected behaviour then. Reopen if behaviour changes.

@jesmrec jesmrec closed this as completed Jun 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants