Troubleshooting

PKCE: code_verifier verification fails

The code_verifier sent at the exchange does not match the request's code_challenge, or the code_challenge was missing while the provider requires it.

PKCE: code_verifier verification failsPKCE

Cause probable. The code_verifier sent at the exchange does not match the request's code_challenge, or the code_challenge was missing while the provider requires it.

What to do? Generate a random code_verifier, compute the code_challenge with S256, keep the verifier until the exchange and send the same one at the end.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my spaceDecode a SAML response