RSX · API · Errors
PKCE required
- Status
- 400
- Slug
- pkce-required
- Type URL
- https://docs.rsx.group/errors/pkce-required
01
What happened
The application is a public client: it has no secret, so RSX ID requires every authorization request it makes to carry a PKCE code_challenge with code_challenge_method=S256. This one did not.
02
What to do
Send a code_challenge (the S256 hash of a random code_verifier) on the authorization request, and the matching code_verifier when you redeem the code. Standard OAuth libraries and MCP clients do this for you.
03
What you receive
The body is application/problem+json. detail varies with the request; everything else is what you see here.
{
"type": "https://docs.rsx.group/errors/pkce-required",
"title": "PKCE required",
"status": 400,
"detail": "...",
"instance": "/{project}/{version}/{group}/{action}",
"requestId": "0198f2b1-..."
}