retrievePendingChallenges method configuration issues

[pkrawczykObj]

retrievePendingChallenges method configuration issues

[FeiChen-okta]

@pkrawczykObj Can you check your orgs oidc configuration. go to
https://{yourorg}/.well-known/openid-configuration?oauthClientId={oidcClientId}

Check the grant_types_supported to see if it has authorization_code and refresh_token.
If they don't exists you will need to enable them in you OIDC app integration. In your okta org you need to enable authorization code and refresh token. See the Native apps section in:
https://help.okta.com/en-us/Content/Topics/Apps/Apps_App_Integration_Wizard_OIDC.htm

[pkrawczykObj]

@FeiChen-okta I checked on my org oidc configuration contains both authorization_code and refresh_token:

- this is the screenshot from my orgs: "https://{yourorg}/.well-known/openid-configuration?oauthClientId={oidcClientId}".

Even the error message says, that my client has those 2 values configured:
"com.okta.devices.api.errors.DeviceAuthenticatorError$InternalDeviceError: The client is not authorized to use the provided grant type. Configured grant types: [refresh_token, authorization_code]."

The question is, which grant type should be provided in addition to those 2? Looking into the documentation:
https://developer.okta.com/docs/guides/authenticators-custom-authenticator/android/main/#maintenance-token-configuration-and-usage

To successfully obtain the maintenance token, developer must first configure his Okta OIDC application to support the JWT Bearer grant type:, but according to the understanding from our backend team, when you use the Admin Console to add or update the OIDC application in a custom authenticator, the application automatically updates with the JWT Bearer grant type”".

But it seems that it is not working, how to set it up?

[FeiChen-okta]

@pkrawczykObj
The link for this instruction seem to be missing. We will communicate the steps to do this via a customer support rep.

[pkrawczykObj]

@FeiChen-okta we managed to update "grant_types" list via postman (https://www.postman.com/okta-eng/workspace/okta-example-collections/request/26510466-4b5017c1-b64f-4e59-be68-43df4dc6811a) and now AuthenticatorClient#retrievePendingChallenges is working fine:

"grant_types": [
"refresh_token",
"authorization_code",
"urn:ietf:params:oauth:grant-type:jwt-bearer"
],

This issue can be closed.