PKCE_VERIFICATION_FAILED

HTTP 400

What it means

The code_verifier does not match the code_challenge provided during authorization.

What to do

Ensure the code_verifier sent to /token is the original random string used to derive the code_challenge with S256 hashing.

Envelope

{
  "error": {
    "code": "PKCE_VERIFICATION_FAILED",
    "http_status": 400,
    "message": "The code_verifier does not match the code_challenge provided during authorization.",
    "remediation_hint": "Ensure the code_verifier sent to /token is the original random string used to derive the code_challenge with S256 hashing.",
    "docs_url": "https://developers.cognethics.com/errors/PKCE_VERIFICATION_FAILED",
    "request_id": "0f2c9b6e-...",
    "details": {}
  }
}

Back to Errors & status codes.