Improve OAuth 2.0 Authorization Code API call
kalzoo opened this issue · comments
Kalan commented
- The Authorization Code flow currently supported by this package isn't compatible with Okta, as it doesn't include a
state
parameter. - The port used for the
redirect_uri
is fixed, which requires modification of the OAuth application whitelist to match. The software, not the service, should be configured to match the other. - The HTTP server shows the "success" message regardless of whether an authorization code was returned.