Kong / Kong/insomnia

OAuth 2 Bug: Grant Code not automatically detected in Redirect URI after successful authentication

Open
#3,175 2 comments 0 reactions 0 assignees View on GitHub
A-networking A-oauth N-investigation stale
Dominant language
TypeScript
Stars
40k
Forks
2.4k
Avg merge
2d 13h
Merged PRs (30d)
61

Description

After a successful authorization, the app that we are authenticating into with OAuth2 redirects to the Redirect URI supplied and appends the grant code in the `code` query string param. Insomnia is not displaying any signs that it has successfully noticed the redirect and grabbed the code from the redirect URI.

Here is a screencast demonstrating the problem. I had to blur out some sensitive info, but it gets the idea across.

https://user-images.githubusercontent.com/700803/110540006-32043480-80e3-11eb-9e78-90f65cafc869.mp4

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the OAuth2 authorization flow shown in the screencast, focusing on the supplied Redirect URI and the returned `code` query parameter. Trace where the app should notice the successful redirect and capture the grant code; done means the code is automatically detected after authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
api, authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.