# LinkedIn OIDC client secret not correctly validating new format

**URL:** https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016
**Category:** Bug
**Tags:** linkedin-oauth
**Created:** [May 14, 2024, 7:49am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016 "2024-05-14T07:49:40Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![hoangphuctran93](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hoangphuctran93/32/290976_2.png) [@hoangphuctran93](https://meta.discourse.org/u/hoangphuctran93)
#### Post date: [May 14, 2024, 7:49am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/1 "2024-05-14T07:49:40Z")

</div>

![image](https://global.discourse-cdn.com/meta/original/4X/7/a/4/7a4e71843fa504cbf098185ab260c75787e52027.png)

I have successfully created an application on linkedin, but when I try to copy client\_secret, I receive the following message. At the same time, the Callback url displays this message

![image](https://global.discourse-cdn.com/meta/original/4X/5/e/f/5efd54e82d618e3199c06afbb1a058386b06b524.png)

---

<div class="post-metadata">

### Author: ![ted](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ted/32/283882_2.png) [@ted](https://meta.discourse.org/u/ted)
#### Post date: [May 15, 2024, 2:49am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/2 "2024-05-15T02:49:35Z")

</div>

Hello, @hoangphuctran93!

**Without sharing your client secret** , please check if it contains any symbols that are not a-z, A-Z, 0-9. If it does, let me know here what character it is. 🙏 As far as I understand, the secret should only  
ever contain alphanumerics. One possibility is that a space or line-break was included when you copied the code.

---

<div class="post-metadata">

### Author: ![hoangphuctran93](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hoangphuctran93/32/290976_2.png) [@hoangphuctran93](https://meta.discourse.org/u/hoangphuctran93)
#### Post date: [May 15, 2024, 2:51am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/3 "2024-05-15T02:51:39Z")

</div>

> [@ted](#):
>
> **Without sharing your client secret** , please check if it contains any symbols that are not a-z, A-Z, 0-9. If it does, let me know here what character it is. 🙏 As far as I understand, the secret should only  
> ever contain alphanumerics. One possibility is that a space or line-break was included when you copied the code

I think LinkedIn has made some updates regarding security code allocation. and as you said they contain .

---

<div class="post-metadata">

### Author: ![ted](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ted/32/283882_2.png) [@ted](https://meta.discourse.org/u/ted)
#### Post date: [May 15, 2024, 3:06am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/4 "2024-05-15T03:06:30Z")

</div>

Thanks! I regenerated a secret on my own app, and they have indeed changed. Fix is here:

[https://github.com/discourse/discourse/pull/27028](https://github.com/discourse/discourse/pull/27028)

---

<div class="post-metadata">

### Author: ![hoangphuctran93](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hoangphuctran93/32/290976_2.png) [@hoangphuctran93](https://meta.discourse.org/u/hoangphuctran93)
#### Post date: [May 15, 2024, 4:16am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/5 "2024-05-15T04:16:54Z")

</div>

Thank you and your members for your timely updates to the community.

---

<div class="post-metadata">

### Author: ![ted](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ted/32/283882_2.png) [@ted](https://meta.discourse.org/u/ted)
#### Post date: [May 18, 2024, 12:00am UTC](https://meta.discourse.org/t/linkedin-oidc-client-secret-not-correctly-validating-new-format/308016/6 "2024-05-18T00:00:17Z")

</div>

This topic was automatically closed after 2 days. New replies are no longer allowed.