I’m testing an OIDC implementation from my machine and using ngrok to expose it for backchannel requests.
I’m able to go through the first half of the auth, but when I get to Exchange Code from Token the request always fails with a 500 response for code_to_token.
{
"error": "Failed to retrieve token"
}
No requests are being made to the backchannel URLs. Are ngrok domains blocked from backchannel requests, or am I missing something? I’ve tried other tools for OIDC testing, and they work just fine.