forgejo-contrib-forgejo-cli-issues-367.md
Watch20
Star402
Fork
You've already forked forgejo-cli
CodeIssues 44Pull requests 8Releases 11Packages 2WikiActivity
Closed
opened 2026-03-15 23:10:52 +01:00 by florian-obernberger · 3 comments
florian-obernberger commented 2026-03-15 23:10:52 +01:00
Contributor
Copy link
TLDR:
When trying to authenticate to a codeberg.org repository while the Web-UI says Authenticated! Close this tab and head back to your terminal the terminal fails with:
Error: api error: failed PKCE code challenge
Location:
<path>/src/auth.rs:254:20
Steps taken before this behavior occurred:
fj release create -b -t<tag> notice that the editor is nvim (aka the $EDITOR variable)auth token already usedfj auth logout)Version
fj v0.4.0 installed via cargo install forgejo-cli
**TLDR:** When trying to authenticate to a codeberg.org repository while the Web-UI says Authenticated! Close this tab and head back to your terminal the terminal fails with: rust Error: api error: failed PKCE code challenge Location: \<path\>/src/auth.rs:254:20 **Steps taken before this behavior occurred:** 1. Wanted to create a release for a preexisting tag 2. After calling fj release create -b -t\<tag\> notice that the editor is nvim (aka the $EDITOR variable) 3. Cancel, since I prefere to use my visual editor (zed, in this case) 4. Play around trying to fix that (unimportant) 5. Retry the command 6. Errors with smf like auth token already used 7. Logout (fj auth logout) 8. Try to log back in 9. The above described happens **Version** fj v0.4.0 installed via cargo install forgejo-cli
Cyborus commented 2026-03-15 23:14:33 +01:00
Member
Copy link
I suspect this is caused by forgejo/forgejo!11513, as that fixed S256 PKCE, which is the method forgejo-cli uses. It's likely this shouldn't have ever worked in the first place!
The fix for this should be published in a point release (v0.4.1)
I suspect this is caused by forgejo/forgejo!11513, as that fixed S256 PKCE, which is the method forgejo-cli uses. It's likely this shouldn't have ever worked in the first place! The fix for this should be published in a point release (v0.4.1)
Cyborus added the Kind/Bug label 2026-03-15 23:14:47 +01:00
florian-obernberger commented 2026-03-15 23:17:45 +01:00
Author
Contributor
Copy link
So if I understand correctly this means that the auth part of forgejo-cli needs to be rewritten and validate the challenges?
So if I understand correctly this means that the auth part of forgejo-cli needs to be rewritten and validate the challenges?
Cyborus commented 2026-03-15 23:22:00 +01:00
Member
Copy link
Rewritten is maybe putting it strongly, but yes, that's what needs fixed.
Rewritten is maybe putting it strongly, but yes, that's what needs fixed.
Cyborus referenced this issue from a pull request that will close it, 2026-03-15 23:42:45 +01:00 fix(login): correctly generate pkce challenge #368
Cyborus closed this issue 2026-03-15 23:58:19 +01:00
Sign in to join this conversation.
No Branch/Tag specified
main
renovate/lock-file-maintenance
renovate/serde-saphyr-0.x
docs/contributing
no-port-in-refspec
login/v16.next.forgejo.org
crates-io-publish
0.5.x
compile-time-fluent
0.4.x
localization-alias-demo
api_url_field
v0.5.0
v0.4.1
v0.4.0
v0.3.0
v0.2.0
v0.1.1
v0.1.0
v0.0.4
v0.0.3
v0.0.2
v0.0.1
Labels
Clear labels[ Kind/Breaking Breaking change that won't be backward compatible
](#)[ Kind/Bug Something is not working
](#)[ Kind/Design Discussion about UI/UX design
](#)[ Kind/Documentation Documentation changes
](#)[ Kind/Enhancement Improve existing functionality
](#)[ Kind/Feature New functionality
](#)[ Kind/Security This is security issue
](#)[ Kind/Testing Issue or pull request related to testing
](#)[ Kind/Upstream This is an issue with upstream software (Forgejo) that is probably not our fault
](#)
[ Priority
Critical The priority is critical
](#)[ Priority
High The priority is high
](#)[ Priority
Low The priority is low
](#)[ Priority
Medium The priority is medium
](#)
[ Reviewed
Confirmed Issue has been confirmed
](#)[ Reviewed
Duplicate This issue or pull request already exists
](#)[ Reviewed
Invalid Invalid issue
](#)[ Reviewed
Won't Fix This issue won't be fixed
](#)
[ Status
Abandoned Somebody has started to work on this but abandoned work
](#)[ Status
Blocked Something is blocking this issue or pull request
](#)[ Status
Need More Info Feedback is required to reproduce issue or to continue work
](#)
[ Suspicious
](#)
No labels Kind/Breaking Kind/Bug Kind/Design Kind/Documentation Kind/Enhancement Kind/Feature Kind/Security Kind/Testing Kind/Upstream [ Priority
Critical ](/forgejo-contrib/forgejo-cli/issues?labels=173012) [ Priority
High ](/forgejo-contrib/forgejo-cli/issues?labels=173013) [ Priority
Low ](/forgejo-contrib/forgejo-cli/issues?labels=173015) [ Priority
Medium ](/forgejo-contrib/forgejo-cli/issues?labels=173014) [ Reviewed
Confirmed ](/forgejo-contrib/forgejo-cli/issues?labels=173007) [ Reviewed
Duplicate ](/forgejo-contrib/forgejo-cli/issues?labels=173005) [ Reviewed
Invalid ](/forgejo-contrib/forgejo-cli/issues?labels=173006) [ Reviewed
Won't Fix ](/forgejo-contrib/forgejo-cli/issues?labels=173008) [ Status
Abandoned ](/forgejo-contrib/forgejo-cli/issues?labels=173011) [ Status
Blocked ](/forgejo-contrib/forgejo-cli/issues?labels=173010) [ Status
Need More Info ](/forgejo-contrib/forgejo-cli/issues?labels=173009) Suspicious
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
Notifications Subscribe
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set.
Reference
forgejo-contrib/forgejo-cli#367
WritePreview
Loading…
Add table
| Rows | | | Columns | |
CancelOK
Add a link
Url Description Hint: With a URL in your clipboard, you can paste directly into the editor to create a link.
CancelOK
CancelSave
Reference in a new issue
Repository
forgejo-contrib/forgejo-cli
Title
Body
Create issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
No Yes