For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nowadi's avatar
nowadi
Icon for Nimbostratus rankNimbostratus
Oct 09, 2020

Authentication OAuth + PKCE, code challenge missing

Hi,

 

Does F5 APM implement PKCE (Proof Key for Code Exchange) ?

 

When I configure the bigip as an OAuth Client and ressource server, and generate an auth_code_request to my Authorization server, I obtain the error "code_challenge missing" from my server.

 

As the "code challenge" is derived from the "code verifier" how could I add it to the request ?

 

Regards,

No RepliesBe the first to reply