code_challenge and code_challenge_method missing in OIDC2 Auth request #2597

Open
opened 2026-03-22 14:14:02 -05:00 by GiteaMirror · 3 comments
Owner

Originally created by @astreaprtcl on GitHub (Mar 18, 2026).

Pre-submission checklist

  • I have searched for existing open or closed issue reports with the same problem.

Description

When trying to authenticate to Vikunja using Kanidm, it fails with the following error:
[error]: No PKCE code challenge was provided with client in enforced PKCE mode | event_tag_id: 12 | o2rs.name: "vikunja"
This is due to the code_challenge and code_challenge_method parameters

Vikunja Version

v2.1.0

Browser and version

No response

Can you reproduce the bug on the Vikunja demo site?

No

Screenshots

Image
Originally created by @astreaprtcl on GitHub (Mar 18, 2026). ### Pre-submission checklist - [x] I have searched for existing open or closed issue reports with the same problem. ### Description When trying to authenticate to Vikunja using Kanidm, it fails with the following error: `[error]: No PKCE code challenge was provided with client in enforced PKCE mode | event_tag_id: 12 | o2rs.name: "vikunja"` This is due to the `code_challenge` and `code_challenge_method` parameters ### Vikunja Version v2.1.0 ### Browser and version _No response_ ### Can you reproduce the bug on the Vikunja demo site? No ### Screenshots <img width="1317" height="711" alt="Image" src="https://github.com/user-attachments/assets/0354d098-1ffe-453a-a528-c303b35b47d9" />
Author
Owner

@astreaprtcl commented on GitHub (Mar 18, 2026):

i am no expert but from what i can tell, this PR would fix it: #2308

@astreaprtcl commented on GitHub (Mar 18, 2026): i am no expert but from what i can tell, this PR would fix it: #2308
Author
Owner

@kolaente commented on GitHub (Mar 18, 2026):

https://github.com/go-vikunja/vikunja/pull/2308 is about making Vikunja an oauth2 provider, that won't solve your problem.

I'll check what we can do here.

@kolaente commented on GitHub (Mar 18, 2026): https://github.com/go-vikunja/vikunja/pull/2308 is about making Vikunja an oauth2 provider, that won't solve your problem. I'll check what we can do here.
Author
Owner

@astreaprtcl commented on GitHub (Mar 18, 2026):

thanks, then i misunderstood the PR, but it does implement the missing parameters from what i can tell

@astreaprtcl commented on GitHub (Mar 18, 2026): thanks, then i misunderstood the PR, but it does implement the missing parameters from what i can tell
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vikunja#2597