CodeFloe OAuth client rejects fj PKCE login

fj -H codefloe.com auth login completes browser authentication, but the token exchange fails with:

api error: invalid empty client secret

CodeFloe’s OAuth application (d8f0480c-cc0a-4cfc-8a16-4b88230d61d4) is configured as confidential, while fj uses Forgejo’s standard public PKCE flow.

Please configure this application as a public client with S256 PKCE and allow:

http://127.0.0.1:26218/

No client secret should be required. This is a CodeFloe OAuth registration issue; fj is a generic Forgejo client.

@caniko This is a 1:1 duplicate of CodeFloe OAuth application rejects public PKCE login - #2 by codefloe - did you do this or did Discourse do something strange here?

It was probably my fault