I'm unable to get the authorization code when trying to authenticate an application with OpenIdDict about openiddict-core HOT 4 CLOSED

Hi,

There are multiple issues with your snippet:

• You're sending both authorization request parameters (e.g response_type) and token request parameters (e.g client_secret or grant_type) as part of the same request to the authorization endpoint, which is completely invalid.
• You're using basic authentication against the authorization endpoint, which makes no sense.
• You're using multiple client authentication methods - i.e sending the secret via both the Authorization header and as part of the request form - which is illegal.

Consider using a real OAuth 2.0/OpenID Connect client stack instead of trying to implement that yourself. The OpenIddict client is an excellent choice for interactive flows like the code flow. You can find a lot of samples in the dedicated repo: https://github.com/openiddict/openiddict-samples

from openiddict-core.

Doing some housecleaning, but feel free to reopen if you need additional details 😃

from openiddict-core.

from openiddict-core.

Hey,

Thanks for checking back in. I meant to reply to you last week but I was up to my neck in alligators.

No worries 👍🏻

Unfortunately, my client wants to do some special processing so we need to partially roll our own solution.

The OpenIddict client has a very powerful events model that allows customizing each aspect of the request processing.
Out of curiosity, can you tell me more about that special processing?

Thanks for your response and thanks for the OpenIDDict libraries. And thank you for your quick responses.

Thanks for your kind words.

from openiddict-core.