PKCE next-auth Version 3.29

[adeola-ak]

Hello, if anyone can help I would appreciate that so much.

I am unable to find any public docs on PKCE with next-auth so my knowledge it quite minimal.

I've got an instance working without PKCE but now need to implement PKCE and go away with the client secret

Okta is my sole provide and right now I'm using the example:

const options = {
  // Configure one or more authentication providers
  providers: [
    Providers.Okta({
      clientId: process.env.OKTA_CLIENTID,
      clientSecret: process.env.OKTA_CLIENTSECRET,
      domain: process.env.OKTA_DOMAIN,
      protection: "pkce",
    }),
    // ...add more providers here
  ],
};

with only 1 change of adding the protection field to the okta options object. I'm really not sure where to go next in order to get this working. Can someone point me in the direction of an example, a doc, or provide steps I can take?

[adeola-ak]

After clicking sign in button I get this URL:
http://localhost:3000/api/auth/signin?error=Callback

and this in the terminal:
[next-auth][error][oauth_get_access_token_error] https://next-auth.js.org/errors#oauth_get_access_token_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' } undefined undefined [next-auth][error][oauth_get_access_token_error] https://next-auth.js.org/errors#oauth_get_access_token_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' } okta undefined [next-auth][error][oauth_callback_error] https://next-auth.js.org/errors#oauth_callback_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' } [next-auth][error][oauth_get_access_token_error] https://next-auth.js.org/errors#oauth_get_access_token_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' } undefined undefined [next-auth][error][oauth_get_access_token_error] https://next-auth.js.org/errors#oauth_get_access_token_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' } okta undefined [next-auth][error][oauth_callback_error] https://next-auth.js.org/errors#oauth_callback_error { statusCode: 400, data: '{"error":"invalid_grant","error_description":"The authorization code is invalid or has expired."}' }