Skip to content

Commit

Permalink
[#506] FIX is not active and the client sends the challenge for code …
Browse files Browse the repository at this point in the history
…verification the auth server doesn't check the code, but accepts any code challenge (#685)
  • Loading branch information
vharseko authored Dec 11, 2023
1 parent 41ba903 commit 7864e65
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -153,7 +153,7 @@ public AccessToken handle(OAuth2Request request, ClientRegistration clientRegist
throw new InvalidGrantException("Authorization code expired.");
}

if (providerSettings.isCodeVerifierRequired()) {
if (codeVerifier != null) {
checkCodeVerifier(authorizationCode, codeVerifier);
}

Expand Down

0 comments on commit 7864e65

Please sign in to comment.