SSO Azure AADSTS54005: OAuth2 Authorization code was already redeemed,

[pptpz]

Hello!
Unfortunatelly I can't get the plugin work with Azure. I have set up with the Generic configuration with the settings below. After I log in I get the following error message: "AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token."

What am i doing wrong? Thanks in advance!

[TahaHydra]

With generic the plugin has worked for me last night i did it all over and apparently its working just fine though , maybe the configuration of your secret is wrong in azure , asked chatgpt about a similar probleme last night it helped
"
This typically occurs when:
The code is used more than once to get an access token.
The user or app tries to reuse the same authorization code from a cached request.
There’s a race condition or duplicate call in the app flow.
A misconfigured app tries to redeem the code on the backend and frontend at the same time.
A network issue causes a retry with the same (already used) code.

How to fix:
Always use a new authorization code — fetch a fresh one from the /authorize endpoint.

Ensure the app does not try to reuse or cache old codes.

If applicable, exchange the code only once — and use the refresh token afterward for new access tokens.

If using a third-party library or SSO setup, make sure it doesn’t retry automatically with the same code.

Debug Tip:
Clear their cookies/session.
Try the login flow again from the beginning (not back/refresh on browser).
Or simply use a new incognito window.
"

Also , i have put the the full deployement policy for the app on my github i used the samething as you and documented it you can check it and see if this solves ur problems

[pptpz]

Thanks for the answer and the useful informations!

I figured out during debugging if i comment out the line 1385 in inc/provider.class.php than the login is succesfull, i don't get AADSTS54005 error message. In this case the getAccessToken(); function is called only once. This would explain the reused token problem.