Invalid Authorization Code error using OAuth 2.0 policy PKCE Flow

[yahyaoui]

Hello,

I'm having issue with configuring OAuth 2.0 with the default policy OAuthV2.

The PKCE Flow was up and running since today I get
{"error":"invalid_grant","error_description":"Invalid authorization code"}

Here is an example of the request(payload) sent

code=wUWZClnU&grant_type=authorization_code&client_id=******&client_secret=*******&redirect_uri=http%3A%2F%2Fwww.google.fr&code_verifier=Whubzdv9zyTyeqdpEpouWE1QVQ0tGlMpbn3eJpTuHog

Regards,

[dknezic]

Have you gone through the auth flow again from the beginning to get a new auth code and try again?

[API-Evangelist]

What's the use case? Would appreciate if you provide some context and proxy bundle/flow which you have done & at what step of PKCE flow you are facing issue?

RFC for understanding - https://datatracker.ietf.org/doc/html/rfc7636

&

possible go thru below & may help understand how to implement in apigee https://www.googlecloudcommunity.com/gc/Cloud-Product-Articles/Dispensing-tokens-via-OAuthV2-with-PK...