mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-05-07 20:38:46 -05:00
The frontend sends the code_verifier in the callback request, but the backend was not forwarding it to the OIDC provider's token endpoint. This caused Dex (and any PKCE-aware provider) to reject the token exchange with "Expecting parameter code_verifier in PKCE flow."