Okta Auth Bypass to get the token

Hello everyone,

Im new on the plateform and im actually working on a website that use “Okta OAuth 2.0” with PKCE security,

In first, we need to request login, which is quite easy.

Then, check with key check if the account is good or not

Then we receive a session_token & a id

After we need to request this :

https://connect.cultura.com/oauth2/ausp0slggmgGzzfjd416/v1/authorize?client_id=&code_challenge=&code_challenge_method=S256&nonce=&prompt=none&redirect_uri=https%3A%2F%2Fmonespacefideliteculturaddict.cultura.com%2Flogin%2Fcallback%2F&response_mode=okta_post_message&response_type=code&sessionToken=&state=default&scope=openid%20profile%20email”

and this request give us a “code” for the next response with this code we can request an another link who give us a access_token

and with this access token we can request okta login and have the real token

But i cant claim this “code” because it say “Bad Request” i used first a plugin for the code challegne then a script but nothing work…

If someone can help me, im active on telegram : @marripoppin

Thank you !

dm tg @Old_DeepGoat
i will help you