Replies: 1 comment
-
Stumbled upon this today and it does indeed look like an inconsistency between the configuration information and what hydra actually supports. Looks doable to make a PR to resolve this inconsistency if the maintainers can advice on whether support for plain code challenges should be added (optionally configurable through client or server config) OR if the configuration response should be fixed. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When I hit the
openid-configuration
endpoint I see the following:And I see the following in the code:
hydra/oauth2/handler.go
Line 509 in 0421fda
However, I also see this in the code:
hydra/fositex/config.go
Lines 133 to 135 in 0421fda
I believe this corresponds to the following
fosite
code:https://github.com/ory/fosite/blob/1f27af44d4f83c258c118839ca3171fff08aa77b/handler/pkce/handler.go#L91-L98
So I'm wondering, does
hydra
supportplain
code challenges? Is this a bug that the configuration endpoint returnsplain
?Beta Was this translation helpful? Give feedback.
All reactions