mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-05-09 05:18:10 -05:00
The frontend sends the code_verifier in the callback request, but the backend was not forwarding it to the OIDC provider's token endpoint. This caused Dex (and any PKCE-aware provider) to reject the token exchange with "Expecting parameter code_verifier in PKCE flow."