Michel Kohanim

We have been dealing with the same exact issue for a few months now. Here's the exception:

Array

(

    [error] => invalid_grant

    [error_description] => Invalid grant: code verifier is invalid

)

BACKTRACE

#0 /var/sites/forum/system/Login/Handler/OAuth2/OAuth2.php(607): IPS\_Log::log('Array\n(\n    [er...', 'oauth')

#1 /var/sites/forum/system/Login/Handler/OAuth2/OAuth2.php(389): IPS\Login\Handler\_OAuth2->_exchangeAuthorizationCodeForAccessToken('4a787f249d4de94...')

#2 /var/sites/forum/system/Login/Handler/OAuth2/OAuth2.php(170): IPS\Login\Handler\_OAuth2->_handleAuthorizationResponse(Object(IPS\Login))

#3 /var/sites/forum/system/Login/Login.php(339): IPS\Login\Handler\_OAuth2->authenticateButton(Object(IPS\Login))

#4 /var/sites/forum/applications/core/modules/front/system/login.php(59): IPS\_Login->authenticate()

#5 /var/sites/forum/system/Dispatcher/Controller.php(118): IPS\core\modules\front\system\_login->manage()

#6 /var/sites/forum/system/Dispatcher/Dispatcher.php(153): IPS\Dispatcher\_Controller->execute()

#7 /var/sites/forum/index.php(13): IPS\_Dispatcher->run()

#8 {main}

@Jim M,

Apologies for the delay. We have our own OAUTH2 provider and we used it successfully for many years before without any issues till the May 8th update. It seems that this issue is not only isolated to us. We have the same issue as outlined here:

https://invisioncommunity.com/forums/topic/474829-issues-with-integrating-custom-identity-provider-service-to-an-invision-community/

Although the login is successful, the members see a page with a red "something went wrong". By refreshing the page, and in extreme cases by going to the homepage, everything starts working again. The error log is replete with:

RE: Array ( [error] => httpServerError [error_description] => Invalid grant: authorization code has expired )

Grant authorization time is 30 seconds. It would be impossible for the grant to have expired during login (3-4 seconds max). The date/time on the machine is 100% accurate. 

Please advise.

With kind regards,
Michel