Hi all,
Looking for someone with experience creating a custom auth provider using the Auth.AuthProviderPluginClass class.
I have everything working fine, but I want to do a "nonce" check after the Http callout in the handleCallback method. But there is no way that I have found to do debugging to find out why it do not work.
The "nonce" is set in the initiate method and stored in the DB and then retrieved in the handleCallback method. It is done this way since we also have implemented "code challenge" as required in OAuth 2.1, and since Salesforce is not supporting this out of the box, we had to make it our self.
The "nonce" given in the initiate method should be verified against the "id token" body and the nonce claim in the handleCallback method after the Http response is received from the call to the token endpoint.
There is no possibility to send anything to the log (System.debug) or use a DML operation after the Http callout, making it impossible to debug what is going on or see if the id token is populated. If anyone have any suggestions based on experience on how to debug or do handle this use-case I would love to here from you.
Cheers Kenneth
Thank you so much @Håkon Kavli and @Erlend Hansen :-D
This was useful information. We ended up not using the custom auth provider in this case, and since SF added support for PKCE in our use case, it solved the main issue.
It was great meeting you today, @Erlend Hansen and talk with the Stretch Engade team about what we do in NAV.
