CAS-005 · Question #514
A security architect is troubleshooting an issue with an OIDC implementation. The architect reviews the following configuration and errors: Error: Invalid authentication request code Which of the foll
The correct answer is A. The redirect-url parameter is not in the allowed list of redirect hosts in the configuration.. In OIDC, the redirect_uri must exactly match one of the allowed redirect URIs configured in the authorization server. If it is missing or not in the allowed list, the server will return an "invalid authentication request code" error, which fits the scenario shown.
Question
A security architect is troubleshooting an issue with an OIDC implementation. The architect reviews the following configuration and errors:
Error: Invalid authentication request code Which of the following is the most likely cause of the error?
Exhibits
Options
- AThe redirect-url parameter is not in the allowed list of redirect hosts in the configuration.
- BIntrospection is not enabled within the OIDC code implementation.
- CThe encoding of the URL parameters on the proxy system is failing.
- DThe parameter is being reused within the authentication challenge.
- EOAuth 2.0 was unable to verify the lack of an interception attack.
How the community answered
(28 responses)- A75% (21)
- B11% (3)
- C7% (2)
- D4% (1)
- E4% (1)
Explanation
In OIDC, the redirect_uri must exactly match one of the allowed redirect URIs configured in the authorization server. If it is missing or not in the allowed list, the server will return an "invalid authentication request code" error, which fits the scenario shown.
Community Discussion
No community discussion yet for this question.