Skip to main content
Newcomer
Jul 11, 2024 11:47 AM UTC
Question

Docusign Authentication API issue

I got this issue when trying to get access token. So I don’t know how to get code challenge and its method. I tried to search around them but nothing is suitable for my issue. It also tell me bout CODE_VERIFIER, and I’m stucking with how to get these values and solve my problem. Can anyone help me to resolve this issue?

https://{{hostenv}}/oauth/token

{
"error": "invalid_request",
"error_description": "code challenge and code challenge method required"
}
 

2 replies

Docusign Alumni
Jul 12, 2024 6:55 PM UTC

This error message suggests that the integration key has been configured with the Proof Key for Code Exchange (PKCE-https://developers.docusign.com/platform/auth/authcode/authcode-get-token/) feature by the developer. This feature boosts the security of the Authorization Code Grant flow. To utilize the optional PKCE code challenge, you should create a pair of code challenge values before initiating the standard ACG flow and requesting an authorization code.

 

My suggestion would be to go to your integration key and find the PKCE option and disable it. This should resolve the issue.

Translate
Jake Fascia
Troubleshooter
Troubleshooter
Mar 18, 2026 2:59 PM UTC

​@Rafay.Khan is there a way to manage this setting from the regular eSign Admin > Apps and Keys, or does it have to be done in the developer.docusign site?   I am trying to setup an API connection and the vendor is saying to disable PKCE

Translate