nextauthjs/next-auth

VK provider not working

Open

#11633 opened on Aug 19, 2024

View on GitHub
 (23 comments) (6 reactions) (0 assignees)TypeScript (20,875 stars) (2,632 forks)batch import
buggood first issueproviders

Description

Provider type

Vk

Environment

  System:
    OS: Windows 10 10.0.19045
    CPU: (12) x64 AMD Ryzen 5 2600 Six-Core Processor
    Memory: 5.75 GB / 15.93 GB
  Binaries:
    Node: 20.11.0 - C:\Program Files\nodejs\node.EXE
    npm: 10.2.4 - C:\Program Files\nodejs\npm.CMD
    pnpm: 8.15.6 - C:\Program Files\nodejs\pnpm.CMD
  Browsers:
    Edge: Spartan (44.19041.3570.0), Chromium (127.0.2651.74)
    Internet Explorer: 11.0.19041.3570
  npmPackages:
    @auth/prisma-adapter: ^2.4.2 => 2.4.2
    next: 14.2.5 => 14.2.5
    next-auth: ^5.0.0-beta.20 => 5.0.0-beta.20
    react: ^18 => 18.3.1

Reproduction URL

https://github.com/degibons/authjs-vk-issue

Describe the issue

When trying to sign in through a VK provider, an error is displayed {"error":"invalid_request","error_description":"Code challenge method is unsupported"}

How to reproduce

  • Clone the repository from Reproduction URL and run npm install
  • Create and setup vk app https://id.vk.com/about/business/go
  • Create .env file from .env.example
  • Fill AUTH_VK_ID, AUTH_VK_SECRET variables from created vk app
  • Run docker db container npm run db
  • Push db schema npx prisma db push
  • Run dev app npm run dev
  • Go to localhost and click the button "SignIn"

Expected behavior

Normal sign in flow without this error.

Contributor guide

Tech stack
typescriptnextjsprismanodejsreact
Domain
authentication
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
OAuth2.0PKCENextAuth.js
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
45
Research direction
Examine the VK provider configuration in the NextAuth source code at `src/providers/vk.ts`. The error indicates the code challenge method is unsupported, so investigate how the OAuth2 flow sets the `code challenge method` parameter. Review the issue comments for any maintainer suggestions about switching to 'plain' or removing PKCE. Test potential fixes by adjusting the provider's configuration to align with VK's OAuth implementation.