okta/okta-oidc-ios

400 bad request. invalid_token.

Closed this issue · 2 comments

Hey I was wondering if you could help shed some light on this issue. We recently updated our app to use Okta authentication and we are getting a number of our users reporting the same error during authentication. They're presented with the browser and see 400 bad request. The id token is invalid message. This appears to effect only certain users as our internal testers haven't experienced this error.

Describe the bug
Users see 400 bad request. invalid_token.

Screenshots
bad_request

Smartphone (please complete the following information):
iOS 15.1,

I'm going to close this issue as we were able to solve it with our customers. There were a couple things we did.

  1. We added some extra logic to clear any persisted auth sessions on a new app install.
  2. We made some changes to how we initialize our app and fetch data from the Keychain / UserDefaults. See iOS 15 bug that has been reported here https://developer.apple.com/forums/thread/691353.

Glad to hear you were able to fix the issue!
Thanks for feedback.

Related Keychain issue (for visibility): #325 #320