auth0 invalid_grant invalid authorization code

Thibault Cros

Hi,

I am working on a Bubble app and I want my users sign in via auth0. I've tested the auth0-oauth continue APi endpoints and it's working well with the demo. However, when I try it with my bubble app I get an error 403: auth0 invalid_grant invalid authorization code. Here is what I founded in the OAuth 2.0 error code specification:

The provided authorization grant (e.g., authorization
               code, resource owner credentials) or refresh token is
               invalid, expired, revoked, does not match the redirection
               URI used in the authorization request, or was issued to
               another client.

I've set my bubble app page to the Allowed Callback URLs in my auth0 app settings and the is no way the authorization code is expired as I used it immediately. I don't know where the error can come from. Any ideas ?

Michael Udinski

Hi @Thibault Cros -- Auth0's error message will give us clues here. One is to check the code - these are going to be one-time use only. So make sure you are not re-using it at any point. Also, it mentioned the redirect URI is not matched. Make sure you are matching the redirect URI for what's configured in auth0 and being used in the call