[GH-ISSUE #4993] [bug]: OAuth 2.0 with PKCE does not show the code Challenge #1899

New issue

Closed

opened 2026-03-16 22:18:24 +03:00 by kerem · 2 comments

kerem commented

2026-03-16 22:18:24 +03:00

Owner

Originally created by @JakobStadlhuber on GitHub (Apr 14, 2025).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4993

Is there an existing issue for this?

I have searched existing issues and this bug hasn't been reported yet

Current behavior

Its not possible to select the challenge, therefore its always an validation failed when trying to generate a token.

Steps to reproduce

see screenshot

Logs and Screenshots

DB output:

{
  "auth": {
    "addTo": "HEADERS",
    "authType": "oauth-2",
    "authActive": true,
    "grantTypeInfo": {
      "token": "",
      "isPKCE": true,
      "scopes": "openid profile email offline_access",
      "clientID": "<<clientId>>",
      "grantType": "AUTHORIZATION_CODE",
      "authEndpoint": "<<authUrl>>",
      "clientSecret": "",
      "tokenEndpoint": "<<tokenUrl>>"
    }
  },
  "headers": []
}

Environment

Production

Hoppscotch Version

Self-Hosted

Interceptor

Extension - Web App

Browsers Affected

Chrome

Operating System

None

Additional Information

No response

Originally created by @JakobStadlhuber on GitHub (Apr 14, 2025). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4993 ### Is there an existing issue for this? - [x] I have searched existing issues and this bug hasn't been reported yet ### Current behavior Its not possible to select the challenge, therefore its always an validation failed when trying to generate a token. ### Steps to reproduce see screenshot ### Logs and Screenshots <img width="664" alt="Image" src="https://github.com/user-attachments/assets/d27e25c0-bd04-49a0-b3fd-be97d849be21" /> DB output: ``` { "auth": { "addTo": "HEADERS", "authType": "oauth-2", "authActive": true, "grantTypeInfo": { "token": "", "isPKCE": true, "scopes": "openid profile email offline_access", "clientID": "<<clientId>>", "grantType": "AUTHORIZATION_CODE", "authEndpoint": "<<authUrl>>", "clientSecret": "", "tokenEndpoint": "<<tokenUrl>>" } }, "headers": [] } ``` ### Environment Production ### Hoppscotch Version Self-Hosted ### Interceptor Extension - Web App ### Browsers Affected Chrome ### Operating System None ### Additional Information _No response_

kerem

2026-03-16 22:18:24 +03:00

closed this issue
added the
bug

need testing
labels

kerem commented

2026-03-16 22:18:41 +03:00

Author

Owner

@JakobStadlhuber commented on GitHub (Apr 14, 2025):

I just modified the DB Row to:

{
  "auth": {
    "addTo": "HEADERS",
    "authType": "oauth-2",
    "authActive": true,
    "grantTypeInfo": {
      "token": "",
      "isPKCE": true,
      "scopes": "openid profile email offline_access",
      "clientID": "<<clientId>>",
      "grantType": "AUTHORIZATION_CODE",
      "authEndpoint": "<<authUrl>>",
      "clientSecret": "",
      "tokenEndpoint": "<<tokenUrl>>",
      "codeVerifierMethod": "S256" <--- Adding key and value in the DB, then it works
    }
  },
  "headers": []
}

This is a workaround for now. The UI works then as expected.

@JakobStadlhuber commented on GitHub (Apr 14, 2025): I just modified the DB Row to: ```json { "auth": { "addTo": "HEADERS", "authType": "oauth-2", "authActive": true, "grantTypeInfo": { "token": "", "isPKCE": true, "scopes": "openid profile email offline_access", "clientID": "<<clientId>>", "grantType": "AUTHORIZATION_CODE", "authEndpoint": "<<authUrl>>", "clientSecret": "", "tokenEndpoint": "<<tokenUrl>>", "codeVerifierMethod": "S256" <--- Adding key and value in the DB, then it works } }, "headers": [] } ``` This is a workaround for now. The UI works then as expected.

kerem commented

2026-03-16 22:18:46 +03:00

Author

Owner

@nivedin commented on GitHub (May 19, 2025):

@JakobStadlhuber can you verify if this issue still persists with the latest release

@nivedin commented on GitHub (May 19, 2025): @JakobStadlhuber can you verify if this issue still persists with the latest release

kerem referenced this issue

2026-03-17 01:09:29 +03:00

[PR #1899] [CLOSED] chore(deps-dev): bump stylelint from 13.13.1 to 14.0.0 #3555