SAP Knowledge Base Article - Preview

3754508 - Error: SmartEdit Login Fails with "Authorization not granted / Invalid request" When Multiple Redirect URIs Are Registered

Symptom

When accessing SmartEdit, the login flow fails with an HTTP 400 error page displaying "Authorization not granted — Invalid request". This occurs after the login page is submitted and the authorization server attempts to redirect back to SmartEdit.

Inspecting the network traffic (e.g. via browser developer tools or a HAR file) reveals that the OAuth authorization request sent to /authorizationserver/oauth/authorize does not include a redirect_uri parameter:

GET /authorizationserver/oauth/authorize?client_id=smartedit&response_type=code&code_challenge={{code_challenge}}&code_challenge_method=S256&scope=basic%20permissionswebservices
HTTP/1.1 400 Bad Request

The issue occurs consistently when two or more redirect URIs are registered for the smartedit OAuth client.


Read more...

Environment

  • SAP Commerce Cloud 2211 for JDK21.10 and lower

Product

SAP Commerce Cloud 2211 for JDK21 ; SAP Commerce all versions

Keywords

SmartEdit, OAuth, PKCE, redirect_uri, authorization code, 400, login, authentication, buildcallbacks, hybris, ccv2, smartedittools, OAuthClientDetails , KBA , CEC-SCC-COM-SEDIT , SmartEdit , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.