Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

ChatGPT authorize request is missing required PKCE parameters

Дата публикации: 09-08-2026 20:42:46



Hello Royal MCP Support,
I am trying to connect Royal MCP to ChatGPT on https://mushwell.com/.
Environment:
Royal MCP version: 1.4.39
OAuth method: Dynamic Client Registration (DCR)
Scope: mcp:full
Dynamic Client Registration works correctly:
POST /register returns HTTP 201
Royal MCP records oauth:register as SUCCESS
ChatGPT receives a valid client_id
The OAuth discovery metadata is accessible and advertises code_challenge_methods_supported: [“S256”]
However, the connection repeatedly fails at oauth:authorize.
The authorization request reaching /authorize contains response_type, client_id, redirect_uri, scope, resource, state and ui_locales, but it does not contain:
code_challenge
code_challenge_method=S256
Royal MCP therefore returns:
{“http_status”: 302,“code”: “invalid_request”,“description”: “PKCE with code_challenge_method=S256 is required.”}
This has occurred in two consecutive connection attempts.
A previous hosting firewall issue affecting /register has already been resolved. The registration and authorization requests now reach Royal MCP correctly, so this is no longer a firewall or Cloudflare issue.
Could you please confirm:
Is this a known compatibility issue between the current ChatGPT OAuth flow and Royal MCP?
Is an update or secure workaround available without disabling PKCE?
Is any additional configuration required in Royal MCP for the PKCE parameters to be sent or preserved?
Thank you.



Основное содержимое страницы с новостью.

Hello Royal MCP Support,

I am trying to connect Royal MCP to ChatGPT on https://mushwell.com/.

Environment:

  • Royal MCP version: 1.4.39
  • OAuth method: Dynamic Client Registration (DCR)
  • Scope: mcp:full

Dynamic Client Registration works correctly:

  • POST /register returns HTTP 201
  • Royal MCP records oauth:register as SUCCESS
  • ChatGPT receives a valid client_id
  • The OAuth discovery metadata is accessible and advertises code_challenge_methods_supported: [“S256”]

However, the connection repeatedly fails at oauth:authorize.

The authorization request reaching /authorize contains response_type, client_id, redirect_uri, scope, resource, state and ui_locales, but it does not contain:

  • code_challenge
  • code_challenge_method=S256

Royal MCP therefore returns:

{
“http_status”: 302,
“code”: “invalid_request”,
“description”: “PKCE with code_challenge_method=S256 is required.”
}

This has occurred in two consecutive connection attempts.

A previous hosting firewall issue affecting /register has already been resolved. The registration and authorization requests now reach Royal MCP correctly, so this is no longer a firewall or Cloudflare issue.

Could you please confirm:

  1. Is this a known compatibility issue between the current ChatGPT OAuth flow and Royal MCP?
  2. Is an update or secure workaround available without disabling PKCE?
  3. Is any additional configuration required in Royal MCP for the PKCE parameters to be sent or preserved?

Thank you.

The page I need help with: [log in to see the link]

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1OAuth authorize redirects to homepage instead of consent screen011.119-09-2026
2OAuth 2.0/authorize fails with 'Something went wrong' on Pay Per Use tier. Al settings verified: billing, enrollment, callback, credentials07.6530-08-2026
3Пользователи из ряда стран пожаловались на сбой в работе ChatGPT09.2625-07-2026
4OpenAI restricts ChatGPT rollout at Washington’s request0527-06-2026
5Жители Британии и США массово пожаловались на перебои работы ChatGPT012.3325-07-2026
6OpenAI announces unlimited GPT-5.6 Luna access for ChatGPT free users018.3306-08-2026
7Is ChatGPT down today? OpenAI confirms AI image generation issue, says fix is on the way 05.3227-07-2026
8ChatGPT Voice upgraded with GPT-Live, bringing more natural voice conversations and GPT-5.5 integration019.209-07-2026
9Call for Participation: Demonstrate MCP-based AI agent security with open identity standards0514-07-2026
10 I tried the best ChatGPT productivity apps — these 5 are actually worth your time 2716-07-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 10.76. Источник: wordpress.org.