`develop` branch failing when retriving access_token from Oauth2 #680

riza-khan · 2025-09-09T15:01:01Z

riza-khan
Sep 9, 2025

@YaroSpace , I'm seeing an issue with develop branch where I'm unable to retrieve the access_token.

I believe per the docs, I changed PKCE config from this:

          "PKCE": {
            "Code Challenge Method": "SHA-256"
          },

to:

          "PKCE": true,

But getting this error:

Here are all of the logs:

                    E5108: Lua: ...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:72: attempt to index local 'result' (a nil value)
stack traceback:
	...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:72: in function 'make_request'
	...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:560: in function <...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:523>
	...are/nvim/lazy/kulala.nvim/lua/kulala/ui/auth_manager.lua:203: in function 'run_cmd'
	...are/nvim/lazy/kulala.nvim/lua/kulala/ui/auth_manager.lua:213: in function 'fn'
	...an/.local/share/nvim/lazy/snacks.nvim/lua/snacks/win.lua:339: in function <...an/.local/share/nvim/lazy/snacks.nvim/lua/snacks/win.lua:334>
                     Executing request: acquire token
Url: https://pfizerpatientservices--sgnqa.sandbox.my.site.com/ONCHYB/services/oauth2/token
Payload: client_id=asdfasdf==&redirect_uri=https://www.google.com/&grant_type=authorization_code&client_secret=asdfasdfasdf&code_verifier=adsfasdfasdf
Headers: Authorization: Basic adsfasdfasdf
                    Acquiring new token for config: grv
                    Authorization code/token acquired for config: grv
                     Auth URL: https://some-site/oauth2/authorize?redirect_uri=https://www.google.com/&client_id=adsfasdfasdf&response_type=code&scope=&code_challenge=fasdfasdfasdf&code_challenge_method=S256
                    Acquiring code for config: grv
                    Selected environment: staging

Fails in develop but works in main FYI.

YaroSpace · 2025-09-09T15:33:47Z

YaroSpace
Sep 9, 2025
Maintainer

My bad. I am in the process of fixing a PKCE issue, must have pushed prematurely.

0 replies

YaroSpace · 2025-09-09T16:52:51Z

YaroSpace
Sep 9, 2025
Maintainer

Pushed an update

10 replies

riza-khan Sep 9, 2025
Author

So for my purposes I do?

 "PKCE": true

YaroSpace Sep 9, 2025
Maintainer

yes, that sets default to S256 and autogenerates challenge/verifier
Unless, you want to choose plain or specify your custom verifier

riza-khan Sep 9, 2025
Author

I tried the above and:

          "PKCE": {
            "Code Challenge Method": "SHA-256"
          },

Neither seem to work

YaroSpace Sep 9, 2025
Maintainer

Should do. I was testing it today.

YaroSpace Sep 9, 2025
Maintainer

"Code Challenge Method": "SHA-256"

Jetbrains uses this, but it is not correct to the spec

YaroSpace · 2025-09-09T19:13:43Z

YaroSpace
Sep 9, 2025
Maintainer

Set to true and let's see your log

17 replies

riza-khan Sep 10, 2025
Author

I tried again:

[4256.13] Resuming coroutine - status: nil

TRACE:{
  A = ".../kulala.nvim/lua/kulala/utils/async.lua:11: in function 'co_resume'",
  B = ".../kulala.nvim/lua/kulala/cmd/oauth.lua:61: in function <.../kulala.nvim/lua/kulala/cmd/oauth.lua:60>"
}
                     [4255.53] Request systemObj
{
  code = 0,
  signal = 0,
  stderr = "",
  stdout = '{"access_token":"<REDACTED_ACCESS_TOKEN>","refresh_token":"<REDACTED_REFRESH_TOKEN>","sfdc_community_url":"<REDACTED_COMMUNITY_URL>","sfdc_community_id":"<REDACTED_COMMUNITY_ID>","signature":"<REDACTED_SIGNATURE>","scope":"refresh_token web api full","id_token":"<REDACTED_ID_TOKEN>","instance_url":"<REDACTED_INSTANCE_URL>","id":"<REDACTED_ID_URL>","token_type":"Bearer","issued_at":"<REDACTED_ISSUED_AT>"}'
}
                     [4255.15] Executed request: acquire token
                     Request failed: acquire token
                     [3446.68] Yielding coroutine - status: nil timeout: 30000
TRACE:{
  A = ".../kulala.nvim/lua/kulala/utils/async.lua:29: in function 'co_yield'",
  B = ".../kulala.nvim/lua/kulala/cmd/oauth.lua:72: in function 'make_request'",
  C = ".../kulala.nvim/lua/kulala/cmd/oauth.lua:567: in function <.../kulala.nvim/lua/kulala/cmd/oauth.lua:530>",
  D = ".../kulala.nvim/lua/kulala/ui/auth_manager.lua:203: in function 'run_cmd'",
  E = ".../kulala.nvim/lua/kulala/ui/auth_manager.lua:213: in function 'fn'",
  F = ".../snacks.nvim/lua/snacks/win.lua:339: in function <.../snacks.nvim/lua/snacks/win.lua:334>"
}
                     [3446.32] Executing request: acquire token
Url: <REDACTED_BASE_URL>/services/oauth2/token
Payload: client_id=<REDACTED_CLIENT_ID>&code=<REDACTED_CODE>&redirect_uri=<REDACTED_REDIRECT_URI>&grant_type=authorization_code&client_secret=<REDACTED_CLIENT_SECRET>&code_verifier=<REDACTED_CODE_VERIFIER>
Headers: Authorization: Basic <REDACTED_AUTH_HEADER>
                    Acquiring new token for config: grv
                    Authorization code/token acquired for config: grv
                     [8976.36] Auth URL: <REDACTED_BASE_URL>/services/oauth2/authorize?redirect_uri=<REDACTED_REDIRECT_URI>&client_id=<REDACTED_CLIENT_ID>&response_type=code&scope=&code_challenge=<REDACTED_CODE_CHALLENGE>&code_challenge_method=S256
                    Acquiring code for config: grv
                    Selected environment: staging

riza-khan Sep 10, 2025
Author

I also sent a request (but it fails since I have no token). These are the logs:

                     [2456.64] Resuming coroutine - status: suspended
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:11: in function 'co_resume'",
  B = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:61: in function <...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:60>"
}
                     [2455.19] Yielding coroutine - status: running timeout: none
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:29: in function 'co_yield'",
  B = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:64: in function 'co_wrap'",
  C = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:107: in function 'get_auth_config'",
  D = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:588: in function 'refresh_token_co'",
  E = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:633: in function <...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:622>"
}
                     [2454.65] Resuming coroutine - status: suspended
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:11: in function 'co_resume'",
  B = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:61: in function <...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:60>"
}
                     [2446.93] Yielding coroutine - status: running timeout: none
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:29: in function 'co_yield'",
  B = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:64: in function 'co_wrap'",
  C = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:107: in function 'get_auth_config'",
  D = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:120: in function 'validate_auth_params'",
  E = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:586: in function 'refresh_token_co'",
  F = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:633: in function <...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:622>"
}
                     [2446.42] Resuming coroutine - status: suspended
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:11: in function 'co_resume'",
  B = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:645: in function 'refresh_token'",
  C = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:659: in function 'read'",
  D = "...ulala.nvim/lua/kulala/parser/string_variables_parser.lua:68: in function <...ulala.nvim/lua/kulala/parser/string_variables_parser.lua:63>",
  E = "[C]: in function 'gsub'",
  F = "...ulala.nvim/lua/kulala/parser/string_variables_parser.lua:37: in function 'parse'",
  G = "...hare/nvim/lazy/kulala.nvim/lua/kulala/parser/request.lua:162: in function 'f'",
  H = "/usr/local/share/nvim/runtime/lua/vim/iter.lua:486: in function 'fn'",
  I = "/usr/local/share/nvim/runtime/lua/vim/iter.lua:491: in function 'parse_headers'",
  J = "...hare/nvim/lazy/kulala.nvim/lua/kulala/parser/request.lua:176: in function 'process_variables'",
  K = "...hare/nvim/lazy/kulala.nvim/lua/kulala/parser/request.lua:257: in function 'set_variables'",
  L = "...hare/nvim/lazy/kulala.nvim/lua/kulala/parser/request.lua:622: in function 'parse'",
  M = "...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:345: in function 'parse_request'",
  N = "...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:383: in function 'process_request'",
  O = "...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:464: in function <...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:461>",
  Q = "...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:65: in function <...ocal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/init.lua:64>"
}
                      33 lines yanked

riza-khan Sep 10, 2025
Author

Also if it helps, here is my config:

"grv": {
  "Acquire Automatically": false,
  "Auth URL": "<REDACTED_BASE_URL>/services/oauth2/authorize",
  "Client ID": "<REDACTED_CLIENT_ID>",
  "Client Secret": "<REDACTED_CLIENT_SECRET>",
  "Expires In": 3600,
  "Grant Type": "Authorization Code",
  "PKCE": true,
  "Password": "",
  "Redirect URL": "<REDACTED_REDIRECT_URL>",
  "Revoke URL": "<REDACTED_BASE_URL>/services/oauth2/revoke",
  "Scope": "",
  "Token URL": "<REDACTED_BASE_URL>/services/oauth2/token",
  "Type": "OAuth2",
  "Use ID Token": false,
  "Username": ""
}

YaroSpace Sep 10, 2025
Maintainer

I need to see the traces before Executing request ...

riza-khan Sep 10, 2025
Author

It works for Docusign (trace below). The issue might be with credentials on my end (though I was able to login in through the browser...). I'll keep poking at it

                     [1908.96] Resuming coroutine - status: nil
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:11: in function 'co_resume'",
  B = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:61: in function <...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:60>"
}
                     [1908.59] Request systemObj
{
  code = 0,
  signal = 0,
  stderr = "",
  stdout = '{"access_token":"eyJ0eXAiOiJNVCIsImFsZyI6IlJTMjU2Iiwia2lkIjoiNjgxODVmZjEtNGU1MS00Y2U5LWFmMWMtNjg5ODEyMjAzMzE3In0.AQoAAAABAAUABwCAc-MoYPDdSAgAgLMGN6Pw3UgCAAvPc9dqEbRMrsEYA4UXvIoVAAEAAAAYAAIAAAAFAAAAHQAAAA0AJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZSIAJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZRIAAQAAAAcAAABtYW5hZ2VkMACASvOmX_DdSA.aycNMrGWic8_2zNrpf1ER1DrPYINirkL9XBvkWm2Z3EXrVZH5jY7VPZOFJNlfpSxHjc4F0n4upVWNJyXhlEekZRiwZti2aENRtp06xVGTUp-GVdmg_XEANwb9sLLv2oD_3u4IfG_lwXJWxy9k9J5xP9DyOxkpVPEqHpyZUBq94UnHTfdbQnr-zCTnZNLxB3oM3PnRcBAQ-r1cKHl0PxtO1UgNFt9uX26PRiwPMl7cSV46R_2wigZSW64dfN2aanY4Yd74trkmlTTKf6rQuaQsILHOPSxvYwFI8ZmSYQU7ZrAiCkmKdTpZq8fMoUjYJdAXpUUBwi_CWyZRgENc19Qnw","token_type":"Bearer","refresh_token":"eyJ0eXAiOiJNVCIsImFsZyI6IlJTMjU2Iiwia2lkIjoiNjgxODVmZjEtNGU1MS00Y2U5LWFmMWMtNjg5ODEyMjAzMzE3In0.AQoAAAABAAgABwCAc-MoYPDdSAgAgPNHIfMH3kgCAAvPc9dqEbRMrsEYA4UXvIoVAAEAAAAYAAIAAAAFAAAAHQAAAA0AJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZSIAJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZRIAAQAAAAcAAABtYW5hZ2VkMACASvOmX_DdSA.4lAlo6sSeZs26SRBv4loyxTwcGDNUOU9Rg6QElwjjVXlf8CbrGuvoZh1enLZ6jOvVaYX22dMoW7Qfxz-Zcyr-j3zRJs4NRYVha6wlHDjHn3DrraqGB1SEyPMNPIdzsamM7LNI1DMwV2bT-haSRLfSDlvVW-1t51SP4jHS4EYy5MInZD0QJNkPkKN_E_5tz0-Lv8GgPD5kIVgedJaTGXbVuNtd_g7tffR9K2ROgc-mi09yE2MWqIhtOTuZJ_OxqRVbqpgK1bEKISpuVc2VPwU6M0jJplT4KVV6dzFv_vLVYiaV4aiz-BOvd9pR4KSCL60HWFSsAgAIwRJZEPT_baseQ","expires_in":28800,"scope":"signature impersonation"}'
}
                     [1908.26] Executed request: acquire token
                     Request failed: acquire token
                     [1304.12] Yielding coroutine - status: nil timeout: 30000
TRACE:{
  A = "...l/share/nvim/lazy/kulala.nvim/lua/kulala/utils/async.lua:29: in function 'co_yield'",
  B = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:72: in function 'make_request'",
  C = "...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:567: in function <...cal/share/nvim/lazy/kulala.nvim/lua/kulala/cmd/oauth.lua:530>",
  D = "...are/nvim/lazy/kulala.nvim/lua/kulala/ui/auth_manager.lua:203: in function 'run_cmd'",
  E = "...are/nvim/lazy/kulala.nvim/lua/kulala/ui/auth_manager.lua:213: in function 'fn'",
  F = "...an/.local/share/nvim/lazy/snacks.nvim/lua/snacks/win.lua:339: in function <...an/.local/share/nvim/lazy/snacks.nvim/lua/snacks/win.lua:334>"
}
                     [1303.9] Executing request: acquire token
Url: https://account-d.docusign.com/oauth/token
Payload: client_id=041643ef-619e-4c3e-a663-a4d961317d9e&code=eyJ0eXAiOiJNVCIsImFsZyI6IlJTMjU2Iiwia2lkIjoiNjgxODVmZjEtNGU1MS00Y2U5LWFmMWMtNjg5ODEyMjAzMzE3In0.AQoAAAABAAYABwCAvx4kYPDdSAgAgEula2Dw3UgCAAvPc9dqEbRMrsEYA4UXvIoVAAEAAAAYAAIAAAAFAAAAHQAAAA0AJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZSIAJAAAADA0MTY0M2VmLTYxOWUtNGMzZS1hNjYzLWE0ZDk2MTMxN2Q5ZRIAAQAAAAcAAABtYW5hZ2VkMACASvOmX_DdSA.CJR1Tsab2s1OjSR0nvzZ4vyx1MGiPQ_BftHe8YKOXZ-z3VKZkA6znhq1ycXh4brKz5q7RbxfFL6m2MeKlq_FsStIfGt6zGu5LKwEbAQfu3G9mYMGAWL6QpyL-vL0AYeLaxWSKoe2Fb6WSQTFePqAsjG-7CJe5qNdV5RmeTmkXA3yQqtFBuKgTDZUN07QVzZEG1cSr5ERmCpOUt8D5znDGMhZM970-KtMyiTBKAqX3K9Q2W4efMGAAx_GZUWqgYKmT6qYLKnu_Fj_yl_S7OAYuFu6lJlvPkx24HTq_2GBmI51P_80eVpFobJBEBDKyVOl3DAonx8MSWyUk_UZhR3h7Q&redirect_uri=https://google.com/&grant_type=authorization_code&client_secret=5f5388b5-55b4-4aab-8f2e-714c41fcf8d2
Headers: Authorization: Basic MDQxNjQzZWYtNjE5ZS00YzNlLWE2NjMtYTRkOTYxMzE3ZDllOjVmNTM4OGI1LTU1YjQtNGFhYi04ZjJlLTcxNGM0MWZjZjhkMg
                    Acquiring new token for config: docusign
                    Authorization code/token acquired for config: docusign
                     [2344.39] Auth URL: https://account-d.docusign.com/oauth/auth?redirect_uri=https://google.com/&client_id=041643ef-619e-4c3e-a663-a4d961317d9e&response_type=code&scope=signature impersonation&state=state&[email protected]
                    Acquiring code for config: docusign
                    Selected environment: staging

YaroSpace · 2025-09-10T12:11:58Z

YaroSpace
Sep 10, 2025
Maintainer

Oh, silly me. Just noticed that you have "Acquire Automatically": false.
I can now reproduce the problem.

Should work, with "Acquire Automatically": true

2 replies

riza-khan Sep 10, 2025
Author

Confirming that this works now :)!

Thanks again!

YaroSpace Sep 10, 2025
Maintainer

Oh, finally. This coroutine issue has been haunting me for days))

develop branch failing when retriving access_token from Oauth2 #680

Uh oh!

riza-khan Sep 9, 2025

Replies: 4 comments · 29 replies

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

riza-khan Sep 9, 2025 Author

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

riza-khan Sep 9, 2025 Author

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

YaroSpace Sep 9, 2025 Maintainer

Uh oh!

riza-khan Sep 10, 2025 Author

Uh oh!

riza-khan Sep 10, 2025 Author

Uh oh!

riza-khan Sep 10, 2025 Author

Uh oh!

Uh oh!

YaroSpace Sep 10, 2025 Maintainer

Uh oh!

Uh oh!

riza-khan Sep 10, 2025 Author

Uh oh!

YaroSpace Sep 10, 2025 Maintainer

Uh oh!

riza-khan Sep 10, 2025 Author

Uh oh!

YaroSpace Sep 10, 2025 Maintainer

`develop` branch failing when retriving access_token from Oauth2 #680

riza-khan
Sep 9, 2025

Replies: 4 comments 29 replies

YaroSpace
Sep 9, 2025
Maintainer

YaroSpace
Sep 9, 2025
Maintainer

riza-khan Sep 9, 2025
Author

YaroSpace Sep 9, 2025
Maintainer

riza-khan Sep 9, 2025
Author

YaroSpace Sep 9, 2025
Maintainer

YaroSpace Sep 9, 2025
Maintainer

YaroSpace
Sep 9, 2025
Maintainer

riza-khan Sep 10, 2025
Author

riza-khan Sep 10, 2025
Author

riza-khan Sep 10, 2025
Author

YaroSpace Sep 10, 2025
Maintainer

riza-khan Sep 10, 2025
Author

YaroSpace
Sep 10, 2025
Maintainer

riza-khan Sep 10, 2025
Author

YaroSpace Sep 10, 2025
Maintainer