Keep getting - The `code` provided was invalid.

[asana]

Keep getting - The `code` provided was invalid.

[slobak]

Are you sure the code you're sending is the exact one you're getting back from the authorization? That is the most likely cause of this error. The code generally begins with 0/. Note codes expire after a relatively short time (like 15 minutes).

[thinklinux]

I've made some screenshots for you with the code. The time interval is less then a second so I don't think expiration is the problem there.

From the popup

From nodejs

[agnoster]

As Greg said, the code begins with 0/ - it looks like you're either double-escaping or when you extract http params it's not unescaping (hence the %2F encoding the /)

[agnoster]

How are you getting the code from your HTTP stack? Normally it should be parsed correctly for you, url decoding is pretty much required to make sense of your query params.

[thinklinux]

@agnoster You were absolutely right. I didn't decode my query params. I have no idea how I missed that especially after Greg's response. Thanks a lot guys! Everything is working great now.

[arcl30]

Hi Guys!

Can you please show an example on how to configure a Authorization Code Grant? Would be very glad if you'll help me with this one.

Thanks!

[thinklinux]

@arcl30 https://github.com/Asana/node-asana/tree/master/examples/oauth/webserver

[arcl30]

I am using the Pop-up flow and I've seen on the source code comments that all implementing class of BaseFlow can only use implicit grant. My question is, is there an authorization grant for Pop-up type?

Thanks for your help

[slobak]

Popup flows run in the browser, which means non-secure client code. You should not store or use secret keys from your client code (which is accessible to anyone), so that means you cannot use the server-side flows like the authorization grant. The implicit grant exists specifically for browser-side flows like the one you are using—we provide both a Popup and a Redirect version, but they both use the implicit grant under the hood.

thank you so much for this thread, was looking for a solution for forever