Pocket-id Error when attempting login. 'Token Request Failed... invalid code verifier'

Open patach opened this issue 1 month ago • 0 comments

📜 Description

I'm having some problems with using authentication with pocket-id on a Selfhosted instance of Postiz.

After following both the steps of the postiz documentation and pocket id's own: https://pocket-id.org/docs/client-examples/postiz

Logging with pocket id allow me to input my passkey, but when it returns, it will just get stuck on a loading screen on postiz.site.com/auth and be stuck there.

Error message:

0|backend   | [Nest] 318  - 12/11/2025, 1:54:20 AM   ERROR [ExceptionsHandler] Token request failed: {"error":"Invalid code verifier"}

0|backend   | Error: Token request failed: {"error":"Invalid code verifier"}

0|backend   |     at OauthProvider.getToken (/app/apps/backend/dist/apps/backend/src/services/auth/providers/oauth.provider.js:55:19)

0|backend   |     at process.processTicksAndRejections (node:internal/process/task_queues:105:5)

0|backend   |     at async AuthService.checkExists (/app/apps/backend/dist/apps/backend/src/services/auth/auth.service.js:140:23)

0|backend   |     at async AuthController.oauthExists (/app/apps/backend/dist/apps/backend/src/api/routes/auth.controller.js:166:32)

My docker compose for oauth:

      NEXT_PUBLIC_POSTIZ_OAUTH_DISPLAY_NAME: "Pocket-ID"
      NEXT_PUBLIC_POSTIZ_OAUTH_LOGO_URL: "https://raw.githubusercontent.com/pocket-id/pocket-id/refs/heads/main/frontend/static/img/static-logo.svg"
      POSTIZ_GENERIC_OAUTH: "true"
      POSTIZ_OAUTH_URL: "https://pocketid-url.com"
      POSTIZ_OAUTH_AUTH_URL: "https://pocketid-url/authorize"
      POSTIZ_OAUTH_TOKEN_URL: "https://pocketid-url/api/oidc/token"
      POSTIZ_OAUTH_USERINFO_URL: "https://pocketid-url/api/oidc/userinfo"
      POSTIZ_OAUTH_CLIENT_ID: "***"
      POSTIZ_OAUTH_CLIENT_SECRET: "***"