openid - Okta: Failed to get authorization code through API call -
i'm integrating okta own idp server using okta's api.
i'm implementing authorization code flow following steps below:
in own server, use
/api/v1/authn
endpoint sessiontoken.use sessiontoken obtain authorization calling endpoint:
/oauth2/v1/authorize?client_id=" + clientid + "&sessiontoken=" + sessiontoken + "&response_type=code&response_mode=query&scope=openid&redirect_uri=" + redirecturl + "&state=evanyang&nonce="
it's supposed return response status code 302
, location
header containing redirect url code
value.
however, keep getting response status code 200
, without location
header, html body saying "you using unsupported browser." , "javascript disabled on browser."
according api documentation: http://developer.okta.com/docs/api/resources/oidc.html#authentication-request, sessiontoken
parameter sufficient this: an okta one-time sessiontoken. allows api-based user login flow (rather okta login ui).
am missing requirement getting authorization code through api? please help.
thanks in advance :)
the authorization code grant type , authorization endpoint in there meant access through browser, not non-browser client.
Comments
Post a Comment