PKCE_REQUIRED

HTTP 400

What it means

PKCE (code_challenge and code_challenge_method) is required for this authorization request.

What to do

Include a S256 code_challenge in the /authorize request and the matching code_verifier in the /token request.

Envelope

{
  "error": {
    "code": "PKCE_REQUIRED",
    "http_status": 400,
    "message": "PKCE (code_challenge and code_challenge_method) is required for this authorization request.",
    "remediation_hint": "Include a S256 code_challenge in the /authorize request and the matching code_verifier in the /token request.",
    "docs_url": "https://developers.cognethics.com/errors/PKCE_REQUIRED",
    "request_id": "0f2c9b6e-...",
    "details": {}
  }
}

Back to Errors & status codes.