openid - Okta: Failed to get authorization code through API call -


i'm integrating okta own idp server using okta's api.

i'm implementing authorization code flow following steps below:

  1. in own server, use /api/v1/authn endpoint sessiontoken.

  2. use sessiontoken obtain authorization calling endpoint: /oauth2/v1/authorize?client_id=" + clientid + "&sessiontoken=" + sessiontoken + "&response_type=code&response_mode=query&scope=openid&redirect_uri=" + redirecturl + "&state=evanyang&nonce="

it's supposed return response status code 302 , location header containing redirect url code value.

however, keep getting response status code 200 , without location header, html body saying "you using unsupported browser." , "javascript disabled on browser."

according api documentation: http://developer.okta.com/docs/api/resources/oidc.html#authentication-request, sessiontoken parameter sufficient this: an okta one-time sessiontoken. allows api-based user login flow (rather okta login ui).

am missing requirement getting authorization code through api? please help.

thanks in advance :)

the authorization code grant type , authorization endpoint in there meant access through browser, not non-browser client.


Comments

Popular posts from this blog

commonjs - How to write a typescript definition file for a node module that exports a function? -

thorough guide for profiling racket code -