Fief
fief_client.client.FiefRequestError: [400] - {"error":"invalid_grant"} #341
Replies: 4 comments 5 replies
-
|
This error usually happens when the authorization code is expired or has been already used. Nothing wrong with your Redirect URI. Maybe you tried to refresh the |
Beta Was this translation helpful? Give feedback.
-
|
Am getting this error too, after 5 attempts at the redirect callback with a different code each time. I notice that the last code is noted twice w/ GET, but I think that's just how the logger displays that |
Beta Was this translation helpful? Give feedback.
-
|
I noticed this works just fine when I run it locally (not in a container, using Makes me think it is some sort of simple config that is missing (I tried adding |
Beta Was this translation helpful? Give feedback.
-
|
I am also experiencing this issue while running Fief containerized. |
Beta Was this translation helpful? Give feedback.
-
|
I am no longer getting these errors, I forgot exactly what I did, but a while back I did add the |
Beta Was this translation helpful? Give feedback.
-
@fubuloubu any chance you can post your state param solution? |
Beta Was this translation helpful? Give feedback.
-
|
To sketch it, just add this to your class StateParams(BaseModel):
expires_at: datetime
url: str
class PlatformAuth(FiefAuth):
async def get_unauthorized_response(self, request: Request, response: Response):
state = secrets.token_urlsafe()
# NOTE: `state_cache` is a KV store (in-memory or Redis)
state_cache[state] = StateParams(
expires_at=utc_now() + settings.OAUTH_STATE_EXPIRY,
url=str(request.url),
)
callback_url = request.url_for("auth_callback")
auth_url = await self.client.auth_url(str(callback_url), scope=["openid"], state=state)
raise HTTPException(
status_code=status.HTTP_307_TEMPORARY_REDIRECT,
headers=dict(Location=auth_url),
)Then fetch that structure from the KV store on your auth callback from Fief (using the state param as your key), then you have your redirect and also a check to see if the state param was unmodified. Make sure to delete the state param in the callback so another callback can't use it |
Beta Was this translation helpful? Give feedback.
-
|
same since some days only, worked before |
Beta Was this translation helpful? Give feedback.
-
|
I was able to get everything working in production like a charm, but can't figure out how to run everything locally inside docker containers. Tried lots of solutions around |
Beta Was this translation helpful? Give feedback.
-
I am getting this error for my web application. fief_client.client.FiefRequestError: [400] - {"error":"invalid_grant"}
I want to know the cause behind this error.
I had set two Redirect URI for my client- http://localhost:8000/auth-callback and https://(my-public-domain)/auth-callback This could be the cause but just want to be sure. Can anyone help me to understand this?
thank you
Beta Was this translation helpful? Give feedback.
All reactions