Get code_challenge and _method from query if not present in body

Reintroduce PR node-oauth#197 fix
mthlemos · Oct 31, 2023 · c1d8610 · c1d8610
1 parent b97f6c7
commit c1d8610
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/handlers/authorize-handler.js b/lib/handlers/authorize-handler.js
@@ -367,7 +367,7 @@ class AuthorizeHandler {
  }
 
  getCodeChallenge (request) {
- return request.body.code_challenge;
+ return request.body.code_challenge || request.query.code_challenge;
  }
 
  /**
@@ -378,7 +378,7 @@ class AuthorizeHandler {
  * (see https://www.rfc-editor.org/rfc/rfc7636#section-4.4)
  */
  getCodeChallengeMethod (request) {
- const algorithm = request.body.code_challenge_method;
+ const algorithm = request.body.code_challenge_method || request.query.code_challenge_method;
 
  if (algorithm && !pkce.isValidMethod(algorithm)) {
  throw new InvalidRequestError(`Invalid request: transform algorithm '${algorithm}' not supported`);