Pull request (OPEN) · PR #1005 fix(endpoint-auth): refuse a missing code_verifier instead of failing · @rmdes
Fixes #1004
A code issued with a challenge now needs code_verifier; without it the token endpoint returns 400 (missing parameter) instead of a 500. Test added alongside the invalid verifier one (fails with 500 before the change).