github-starred/vikunja
2
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-05-08 04:48:27 -05:00
Code Issues 690 Packages Projects Releases 11 Wiki Activity

[GH-ISSUE #2410] code_challenge and code_challenge_method missing in OIDC2 Auth request #6669

New Issue
Closed
opened 2026-04-20 17:15:34 -05:00 by GiteaMirror · 7 comments
GiteaMirror commented 2026-04-20 17:15:34 -05:00
Owner
Copy Link

Originally created by @astreaprtcl on GitHub (Mar 18, 2026).
Original GitHub issue: https://github.com/go-vikunja/vikunja/issues/2410

Pre-submission checklist

  • I have searched for existing open or closed issue reports with the same problem.

Description

When trying to authenticate to Vikunja using Kanidm, it fails with the following error:
[error]: No PKCE code challenge was provided with client in enforced PKCE mode | event_tag_id: 12 | o2rs.name: "vikunja"
This is due to the code_challenge and code_challenge_method parameters

Vikunja Version

v2.1.0

Browser and version

No response

Can you reproduce the bug on the Vikunja demo site?

No

Screenshots

Image
Originally created by @astreaprtcl on GitHub (Mar 18, 2026). Original GitHub issue: https://github.com/go-vikunja/vikunja/issues/2410 ### Pre-submission checklist - [x] I have searched for existing open or closed issue reports with the same problem. ### Description When trying to authenticate to Vikunja using Kanidm, it fails with the following error: `[error]: No PKCE code challenge was provided with client in enforced PKCE mode | event_tag_id: 12 | o2rs.name: "vikunja"` This is due to the `code_challenge` and `code_challenge_method` parameters ### Vikunja Version v2.1.0 ### Browser and version _No response_ ### Can you reproduce the bug on the Vikunja demo site? No ### Screenshots <img width="1317" height="711" alt="Image" src="https://github.com/user-attachments/assets/0354d098-1ffe-453a-a528-c303b35b47d9" />
GiteaMirror commented 2026-04-20 17:15:35 -05:00
Author
Owner
Copy Link

@astreaprtcl commented on GitHub (Mar 18, 2026):

i am no expert but from what i can tell, this PR would fix it: #2308

<!-- gh-comment-id:4081623676 --> @astreaprtcl commented on GitHub (Mar 18, 2026): i am no expert but from what i can tell, this PR would fix it: #2308
GiteaMirror commented 2026-04-20 17:15:35 -05:00
Author
Owner
Copy Link

@kolaente commented on GitHub (Mar 18, 2026):

https://github.com/go-vikunja/vikunja/pull/2308 is about making Vikunja an oauth2 provider, that won't solve your problem.

I'll check what we can do here.

<!-- gh-comment-id:4081719555 --> @kolaente commented on GitHub (Mar 18, 2026): https://github.com/go-vikunja/vikunja/pull/2308 is about making Vikunja an oauth2 provider, that won't solve your problem. I'll check what we can do here.
GiteaMirror commented 2026-04-20 17:15:36 -05:00
Author
Owner
Copy Link

@astreaprtcl commented on GitHub (Mar 18, 2026):

thanks, then i misunderstood the PR, but it does implement the missing parameters from what i can tell

<!-- gh-comment-id:4081781736 --> @astreaprtcl commented on GitHub (Mar 18, 2026): thanks, then i misunderstood the PR, but it does implement the missing parameters from what i can tell
GiteaMirror commented 2026-04-20 17:15:36 -05:00
Author
Owner
Copy Link

@kolaente commented on GitHub (Apr 3, 2026):

Just to make sure: Are you trying to authenticate using PKCE?

<!-- gh-comment-id:4184610710 --> @kolaente commented on GitHub (Apr 3, 2026): Just to make sure: Are you trying to authenticate using PKCE?
GiteaMirror commented 2026-04-20 17:15:36 -05:00
Author
Owner
Copy Link

@astreaprtcl commented on GitHub (Apr 4, 2026):

yes, the pkce parameters are missing, but i have also found the option in kanidm to disable requiring them

<!-- gh-comment-id:4186924032 --> @astreaprtcl commented on GitHub (Apr 4, 2026): yes, the pkce parameters are missing, but i have also found the option in kanidm to disable requiring them
GiteaMirror commented 2026-04-20 17:15:37 -05:00
Author
Owner
Copy Link

@kolaente commented on GitHub (Apr 4, 2026):

Yeah Vikunja does not support PKCE. As far as I understand it, that's not really a good fit because Vikunja is a server application. Use the existing methods instead.

Closing as not a bug. If you want this feature, please open a new issue or a proposal in the forum.

<!-- gh-comment-id:4187655409 --> @kolaente commented on GitHub (Apr 4, 2026): Yeah Vikunja does not support PKCE. As far as I understand it, that's not really a good fit because Vikunja is a server application. Use the existing methods instead. Closing as not a bug. If you want this feature, please open a new issue or a proposal [in the forum](https://community.vikunja.io).
GiteaMirror commented 2026-04-20 17:15:37 -05:00
Author
Owner
Copy Link

@vikunja-bot-app[bot] commented on GitHub (Apr 4, 2026):

This issue has been fixed in 4c56553, please check with the next unstable build (should be ready for deployment in ~30min, also on the demo).

<!-- gh-comment-id:4187655623 --> @vikunja-bot-app[bot] commented on GitHub (Apr 4, 2026): This issue has been fixed in [`4c56553`](), please check with the next unstable build (should be ready for deployment in ~30min, also on [the demo](https://try.vikunja.io)).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/api
area/attachments
area/auth
area/avatars
area/backup-restore
area/caldav
area/calendar-view
area/comments
area/config
area/database
area/desktop
area/docker
area/email
area/favorites
area/filters
area/frontend
area/gantt
area/i18n
area/import-export
area/internal-code
area/kanban
area/labels
area/list-view
area/mobile
area/notifications
area/permissions
area/projects
area/pwa
area/recurring-tasks
area/reminders
area/search
area/shortcuts
area/subtasks
area/sync
area/table-view
area/task-editor
area/task-metadata
area/task-relations
area/teams
area/theming
area/time-tracking
area/typesense
area/views
area/webhooks
bug
changes requested
concern/accessibility
concern/performance
concern/regression
concern/ux
confirmed
db/mysql
dependencies
enhancement
good first issue
help wanted
integration/inbound
integration/outbound
kind/bug
kind/feature
needs reproduction
pull-request
Mirrored from GitHub Pull Request
 question
security
support
upstream issue
waiting for reply
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vikunja#6669
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?