What's wrong with my Okta Provider?

[dryhurst]

Question 💬

Here is the code:

import NextAuth from "next-auth"
import OktaProvider from "next-auth/providers/okta"

export default NextAuth({
  providers: [
    OktaProvider({
      clientId: process.env.OKTA_CLIENT_ID ?? "",
      issuer: process.env.OKTA_ISSUER ?? "",
      clientSecret: "",
      authorization: {
        params: {
          scope: "openid profile email groups",
        },
      },
      checks: ["pkce"],
    }),
  ],
})

Here is the error:

event - compiled client and server successfully in 196 ms (2041 modules)
error - unhandledRejection: ReferenceError: window is not defined
    at _callee5$ (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\next-auth\react\index.js:220:160)
    at tryCatch (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\regeneratorRuntime.js:86:1
7)
    at Generator._invoke (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\regeneratorRuntim
e.js:66:24)
    at Generator.next (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\regeneratorRuntime.j
s:117:21)
    at asyncGeneratorStep (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\asyncToGenerator
.js:3:24)
    at _next (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\asyncToGenerator.js:25:9)    
    at C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\asyncToGenerator.js:32:7
    at new Promise (<anonymous>)
    at C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\@babel\runtime\helpers\asyncToGenerator.js:21:12
    at signIn (C:\Users\jonat\work\SafetyManaged\cloud2.safetymanaged.com\node_modules\next-auth\react\index.js:209:18)
wait  - compiling /api/auth/[...nextauth]...
event - compiled successfully in 45 ms (203 modules)
[next-auth][error][OAUTH_CALLBACK_HANDLER_ERROR]
https://next-auth.js.org/errors#oauth_callback_handler_error invalid_request {
  error: {
    message: 'invalid_request',
    stack: 'Error: invalid_request\n' +
      '    at oAuthCallback (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\lib\\oauth\\c
allback.js:37:19)\n' +
      '    at Object.callback (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\routes\\cal
lback.js:50:39)\n' +
      '    at NextAuthHandler (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\index.js:17
8:41)\n' +
      '    at runMicrotasks (<anonymous>)\n' +
      '    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n' +
      '    at async NextAuthNextHandler (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\next\\i
ndex.js:23:19)\n' +
      '    at async C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\next\\index.js:59:32\n' +   
      '    at async Object.apiResolver (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\
\api-utils\\node.js:179:9)\n' +
      '    at async DevServer.runApi (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\\n
ext-server.js:381:9)\n' +
      '    at async Object.fn (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\\base-ser
ver.js:500:37)',
    name: 'Error'
  },
  error_description: "The authentication request has an invalid 'state' parameter.",
  providerId: 'okta',
  message: 'invalid_request'
}
[next-auth][error][OAUTH_CALLBACK_ERROR]
https://next-auth.js.org/errors#oauth_callback_error invalid_request {
  message: 'invalid_request',
  stack: 'Error: invalid_request\n' +
    '    at oAuthCallback (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\lib\\oauth\\cal
lback.js:37:19)\n' +
    '    at Object.callback (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\routes\\callb
ack.js:50:39)\n' +
    '    at NextAuthHandler (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\core\\index.js:178:
41)\n' +
    '    at runMicrotasks (<anonymous>)\n' +
    '    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n' +
    '    at async NextAuthNextHandler (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\next\\ind
ex.js:23:19)\n' +
    '    at async C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next-auth\\next\\index.js:59:32\n' +     
    '    at async Object.apiResolver (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\\a
pi-utils\\node.js:179:9)\n' +
    '    at async DevServer.runApi (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\\nex
t-server.js:381:9)\n' +
    '    at async Object.fn (C:\\Users\\jonat\\work\\SafetyManaged\\cloud2.safetymanaged.com\\node_modules\\next\\dist\\server\\base-serve
r.js:500:37)',
  name: 'Error'
}

How to reproduce ☕️

install latest next. install latest next-auth. use okta provider.

Contributing 🙌🏽

No, I am afraid I cannot help regarding this

[dryhurst]

Found the answer here: #3540 (comment)

but now the callback is failing with error

[next-auth][error][OAUTH_CALLBACK_ERROR]
https://next-auth.js.org/errors#oauth_callback_error decryption operation failed {
  error: {
    message: 'decryption operation failed',
    stack: 'JWEDecryptionFailed: decryption operation failed\n' +
      '    at gcmDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/runtime/decrypt.js:67:15)\n' +
      '    at decrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/runtime/decrypt.js:92:20)\n' +
      '    at flattenedDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwe/flattened/decrypt.js:119:52)\n' +
      '    at async compactDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwe/compact/decrypt.js:18:23)\n' +
      '    at async jwtDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwt/decrypt.js:8:23)\n' +
      '    at async Object.decode (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/jwt/index.js:64:7)\n' +
      '    at async useState (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/lib/oauth/state-handler.js:62:17)\n' +
      '    at async oAuthCallback (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/lib/oauth/callback.js:82:19)\n' +
      '    at async Object.callback (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/routes/callback.js:50:11)\n' +
      '    at async NextAuthHandler (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/index.js:178:28)',
    name: 'JWEDecryptionFailed'
  },
  providerId: 'okta',
  message: 'decryption operation failed'
}
[next-auth][error][CALLBACK_OAUTH_ERROR]
https://next-auth.js.org/errors#callback_oauth_error decryption operation failed JWEDecryptionFailed: decryption operation failed
    at gcmDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/runtime/decrypt.js:67:15)
    at decrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/runtime/decrypt.js:92:20)
    at flattenedDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwe/flattened/decrypt.js:119:52)
    at async compactDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwe/compact/decrypt.js:18:23)
    at async jwtDecrypt (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/jose/dist/node/cjs/jwt/decrypt.js:8:23)
    at async Object.decode (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/jwt/index.js:64:7)
    at async useState (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/lib/oauth/state-handler.js:62:17)
    at async oAuthCallback (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/lib/oauth/callback.js:82:19)
    at async Object.callback (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/routes/callback.js:50:11)
    at async NextAuthHandler (/Users/jonathan/work/SafetyManaged/cloud2.safetymanaged.com/node_modules/next-auth/core/index.js:178:28) {
  name: 'OAuthCallbackError',
  code: 'ERR_JWE_DECRYPTION_FAILED'