Skip to main content
Question

Docusign Authentication API issue

  • July 11, 2024
  • 2 replies
  • 353 views

Forum|alt.badge.img+1

I got this issue when trying to get access token. So I don’t know how to get code challenge and its method. I tried to search around them but nothing is suitable for my issue. It also tell me bout CODE_VERIFIER, and I’m stucking with how to get these values and solve my problem. Can anyone help me to resolve this issue?

https://{{hostenv}}/oauth/token

{
"error": "invalid_request",
"error_description": "code challenge and code challenge method required"
}
 

2 replies

Forum|alt.badge.img+5
  • Docusign Employee
  • July 12, 2024

This error message suggests that the integration key has been configured with the Proof Key for Code Exchange (PKCE-https://developers.docusign.com/platform/auth/authcode/authcode-get-token/) feature by the developer. This feature boosts the security of the Authorization Code Grant flow. To utilize the optional PKCE code challenge, you should create a pair of code challenge values before initiating the standard ACG flow and requesting an authorization code.

 

My suggestion would be to go to your integration key and find the PKCE option and disable it. This should resolve the issue.


Jake Fascia
Active Voice
Forum|alt.badge.img+2
  • Active Voice
  • March 18, 2026

@Rafay.Khan is there a way to manage this setting from the regular eSign Admin > Apps and Keys, or does it have to be done in the developer.docusign site?   I am trying to setup an API connection and the vendor is saying to disable PKCE