Custom forgot password url without pkce parameters

[hamza]

Whenever I am trying to reset password it's giving error that code_verifier is missing. This is happening because redirecting to forgot password from login page is also sending pkce parameters like code challenge. How can I exclude pkce parameters from forgot password link on login page?

[joshua]

@hamza

If you are using hosted paged shipped with FusionAuth, then the forgot password links should be built for you (no adjustment needed).

All of our hosted pages are written in FreeMarker and can be edited as required. Can you confirm the workflow that you are attempting to enable (mobile app, web app, Auth Code Grant, etc...)

Thanks,
Josh

[robotdan]

@joshua Can you try and recreate this one to ensure we don't have a bug?
@hamza Have you configured client authentication as required in your application, or only required when not using PKCE?

[joshua]

@robotdan Was able to use hosted pages to do a forgot password flow successfully both on local dev and using our local node app.

@hamza Let us know what other variables / your workflow is so that we can attempt a recreation if necessary.