Closed
Description
Describe the bug
When calling the /token endpoint in exchangeAuthorizationCode the ProxyOAuthServerProvider does not send redirect_uri - which is required according to the spec. This leads to token endpoints returning 400/500 when (for example) proxying to Amazon Cognito.
To Reproduce
Steps to reproduce the behavior:
- Leverage ProxyOAuthServerProvider as described in the docs
- Return 401 to trigger Authorization Flow
- /authorize works
- /token fails
Expected behavior
The redirect_uri that was used during /authorize should be sent to the token endpoint.