fix(generic-oauth): remove code verifier on verification request if pkce isn't enabled

2026-05-23 07:18:56 -05:00 · 2025-01-15 12:09:28 +03:00
parent 0124f0adff
commit 6dc8422413
1 changed files with 1 additions and 1 deletions
--- a/packages/better-auth/src/plugins/generic-oauth/index.ts
+++ b/packages/better-auth/src/plugins/generic-oauth/index.ts
@@ -492,7 +492,7 @@ export const genericOAuth = (options: GenericOAuthOptions) => {
 						}
 						tokens = await validateAuthorizationCode({
 							code,
-							codeVerifier,
+							codeVerifier: provider.pkce ? codeVerifier : undefined,
 							redirectURI: `${ctx.context.baseURL}/oauth2/callback/${provider.providerId}`,
 							options: {
 								clientId: provider.clientId,