The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab "Authentication bypass via OAuth implicit flow" seems to be broken

guppy | Last updated: Jan 08, 2023 11:14PM UTC

When I try to go to "my account" in this lab I get the following error: SessionNotFound: invalid_request at Provider.getInteraction (/opt/node-v18.12.1-linux-x64/lib/node_modules/oidc-provider/lib/provider.js:50:11) at Provider.interactionDetails (/opt/node-v18.12.1-linux-x64/lib/node_modules/oidc-provider/lib/provider.js:228:27) at /home/carlos/oauth/index.js:160:34 at Layer.handle [as handle_request] (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/layer.js:95:5) at next (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/route.js:137:13) at setNoCache (/home/carlos/oauth/index.js:121:5) at Layer.handle [as handle_request] (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/layer.js:95:5) at next (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/route.js:137:13) at Route.dispatch (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/route.js:112:3) at Layer.handle [as handle_request] (/opt/node-v18.12.1-linux-x64/lib/node_modules/express/lib/router/layer.js:95:5) How to reproduce: 1) start the "Authentication bypass via OAuth implicit flow" lab 2) go to the "my account" page, the "We are now redirecting you to login with social media..." message appears and after a couple of seconds the above error is thrown

Michelle, PortSwigger Agent | Last updated: Jan 09, 2023 10:27AM UTC

Thanks for getting in touch. I've just tested this lab, but when I go to the account page and log in, I don't see the same error using either Burp's embedded browser or the latest version of Firefox. Have you tried using Burp's embedded browser?

guppy | Last updated: Jan 09, 2023 01:51PM UTC