From ed9559efe5104c2a8d40e2e943cb9e3cee7277f4 Mon Sep 17 00:00:00 2001
From: Erki Aas <eaas@k-space.ee>
Date: Tue, 26 Mar 2024 14:47:45 +0200
Subject: [PATCH] fix(oidc): temporarily disable pkce

---
 src/services/auth-oidc/auth-oidc.class.ts                   | 6 ------
 src/services/auth-oidc/callback/auth-oidc-callback.class.ts | 2 --
 2 files changed, 8 deletions(-)

diff --git a/src/services/auth-oidc/auth-oidc.class.ts b/src/services/auth-oidc/auth-oidc.class.ts
index 29283be..2f96233 100644
--- a/src/services/auth-oidc/auth-oidc.class.ts
+++ b/src/services/auth-oidc/auth-oidc.class.ts
@@ -33,18 +33,12 @@ export class AuthOidcService<ServiceParams extends AuthOidcParams = AuthOidcPara
             id_token_signed_response_alg: config.get('oidc.signedResponseAlg'),
             token_endpoint_auth_method: config.get('oidc.authMethod'),
         });
-        const codeVerifier = generators.codeVerifier();
-        const codeChallenge = generators.codeChallenge(codeVerifier);
-
         const url = client.authorizationUrl({
             redirect_uri: config.get('clientUrl') + '/auth-oidc/callback',
             scope: config.get('oidc.scopes'),
             response_type: config.get('oidc.responseTypes'),
-            code_challenge: codeChallenge,
-            code_challenge_method: config.get('oidc.codeChallengeMethod'),
         });
 
-        params.session.codeVerifier = codeVerifier;
         return url;
     }
 }
diff --git a/src/services/auth-oidc/callback/auth-oidc-callback.class.ts b/src/services/auth-oidc/callback/auth-oidc-callback.class.ts
index c4c9234..e388762 100644
--- a/src/services/auth-oidc/callback/auth-oidc-callback.class.ts
+++ b/src/services/auth-oidc/callback/auth-oidc-callback.class.ts
@@ -37,11 +37,9 @@ export class AuthOidcCallbackService<ServiceParams extends AuthOidcCallbackParam
             response_types: ['code'],
         });
 
-        const codeVerifier = params.session.codeVerifier;
         const tokenSet = await client.callback(
             config.get('clientUrl') + '/auth-oidc/callback',
             { code: params.query.code, iss: params.query.iss },
-            { code_verifier: codeVerifier }
         );
         const userinfo = await client.userinfo(tokenSet.access_token as string);