Skip to content

fix(authService): always use redirect URI in lowercase in Auth Code with PKCE flow#2869

Open
J0F3 wants to merge 1 commit intoAzure:masterfrom
J0F3:fix/redirect-urls-lowcase-for-auth-code-with-pkce
Open

fix(authService): always use redirect URI in lowercase in Auth Code with PKCE flow#2869
J0F3 wants to merge 1 commit intoAzure:masterfrom
J0F3:fix/redirect-urls-lowcase-for-auth-code-with-pkce

Conversation

@J0F3
Copy link
Copy Markdown

@J0F3 J0F3 commented Mar 16, 2026

fixes #2868

Copilot AI review requested due to automatic review settings March 16, 2026 09:37
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes a bug where the OAuth 2.0 Auth Code with PKCE flow fails when the authorization server name contains uppercase letters, due to mismatched redirect URIs between the authorization and token requests.

Changes:

  • Apply .toLowerCase() to the redirect URI in the token exchange request to match the already-lowercased URI used in the authorization request.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Auth Code with PKCE Flow does not work when the Auth Server contains uppercase in its name / Id

2 participants