Fetching OAuth access token returns 400 "invalid_grant"
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 20/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Domain
- api, authentication
Research direction
No repository file or test is identified. Start by comparing the authorization and token request parameters with the linked auth-code guide, especially redirect_uri and PKCE values; done means reproducing the failure, identifying a repository-level fix if one exists, or documenting that the issue is external to this repository.
Written by the indexing model from the issue text.
Description
Title: Fetching OAuth access token returns 400 "invalid_grant"
Issue found of: October 16th, 2024
Endpoint(s):
POST secure.soundcloud.com/oauth/token
Scope(s):
Application uses authorization_code workflow for authentication
Steps to reproduce:
After authorizing via https://secure.soundcloud.com/authorize with params:
client_id=[redacted]
redirect_uri=[http:// URL]
response_type=code
code_challenge=[code challenge]
code_challenge_method=S256
state=[random]
…attempt to obtain an Access Token from https://secure.soundcloud.com/oauth/token with:
code=[code received from authorize]
client_id=[redacted]
client_secret=[redacted]
redirect_uri=[http:// URL]
grant_type='authorization_code'
code_verifier=[base 64 string used to create the code_challenge]
Expected behaviour:
The Access Token is returned as per https://developers.soundcloud.com/docs/api/guide#auth-code
Actual behaviour:
400 {"error":"invalid_grant"}
This had been working until last week (the issue was noticed on Oct 16), and there have been no changes on our our side.
If it's of any relevance, the redirect URL registered is http:// not https:// and that is what is passed, but the site is HTTPS now.
- Dominant language
- JavaScript
- Stars
- 254
- Forks
- 53
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from soundcloud/api
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 35/100
soundcloud/api#581 · 1 comment ·
-
widget
Difficulty 5/5 Over a week Newbie friendliness 35/100
soundcloud/api#557 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 38/100
soundcloud/api#548 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
soundcloud/api#547 · 2 reactions ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
soundcloud/api#545 · 2 comments · 1 reaction ·
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
docToolchain/docToolchain#1705 ·
-
Timezone select lists one option per character; duplicate "Failed" reason; shared tracker popover id Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
nightscout/nocturne#1414 ·
-
bug v2
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
modelcontextprotocol/inspector#2458 · 1 comment ·
-
Mend: dependency security vulnerability status: needs triage 🕵️♀️
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
carbon-design-system/ibm-products#9907 ·