Versioning issue - Vite (7.2.4)/Duende BFF(3.0.0)

[MatthewFyfe1234]

Describe the bug

Hi we have recently upgrade from Vitae 7.1.11 -> 7.2.4 in a React project. The whole project is a .NET + REACT stack and we are getting "invalid_request" when we are trying to login to Duende (Identity Server).

This is the package.json of the working React version:

{
  "name": "merit.client",
  "private": true,
  "version": "0.0.0",
  "type": "module",
  "scripts": {
    "dev": "vite",
    "build": "vite build",
    "lint": "eslint .",
    "preview": "vite preview"
  },
  "dependencies": {
    "@emotion/react": "^11.14.0",
    "@emotion/styled": "^11.14.1",
    "@fortawesome/free-solid-svg-icons": "^7.1.0",
    "@fortawesome/react-fontawesome": "^3.1.0",
    "@fullcalendar/daygrid": "^6.1.19",
    "@fullcalendar/interaction": "^6.1.19",
    "@fullcalendar/react": "^6.1.19",
    "@fullcalendar/timegrid": "^6.1.19",
    "@mui/icons-material": "^7.3.5",
    "@mui/lab": "^7.0.1-beta.19",
    "@mui/material": "^7.3.5",
    "@mui/system": "^7.3.5",
    "@mui/x-date-pickers": "^8.19.0",
    "@mui/x-tree-view": "^8.19.0",
    "@pixi/graphics": "^7.4.3",
    "@pixi/graphics-extras": "^7.4.3",
    "@reduxjs/toolkit": "^2.10.1",
    "chroma-js": "^3.1.2",
    "dayjs": "^1.11.19",
    "i18next": "^25.6.3",
    "lodash": "^4.17.21",
    "pixi.js": "^8.14.3",
    "prop-types": "^15.8.1",
    "react": "^19.2.0",
    "react-colorful": "^5.6.1",
    "react-dom": "^19.2.0",
    "react-i18next": "^16.3.5",
    "react-redux": "^9.2.0",
    "react-router-dom": "^7.9.6",
    "recharts": "^3.4.1",
    "seedrandom": "^3.0.5",
    "smooth-scroll": "^16.1.3"
  },
  "devDependencies": {
    "@eslint/js": "^9.39.1",
    "@types/react": "^19.2.6",
    "@vitejs/plugin-react": "^5.1.1",
    "eslint": "^9.39.1",
    "eslint-plugin-react-hooks": "^7.0.1",
    "eslint-plugin-react-refresh": "^0.4.24",
    "globals": "^16.5.0",
    "vite": "7.1.11",
    "vite-plugin-svgr": "^4.5.0"
  }
}

This is the version that doesn't work:

{
  "name": "merit.client",
  "private": true,
  "version": "0.0.0",
  "type": "module",
  "scripts": {
    "dev": "vite",
    "build": "vite build",
    "lint": "eslint .",
    "preview": "vite preview"
  },
  "dependencies": {
    "@emotion/react": "^11.14.0",
    "@emotion/styled": "^11.14.1",
    "@fortawesome/free-solid-svg-icons": "^7.1.0",
    "@fortawesome/react-fontawesome": "^3.1.0",
    "@fullcalendar/daygrid": "^6.1.19",
    "@fullcalendar/interaction": "^6.1.19",
    "@fullcalendar/react": "^6.1.19",
    "@fullcalendar/timegrid": "^6.1.19",
    "@mui/icons-material": "^7.3.5",
    "@mui/lab": "^7.0.1-beta.19",
    "@mui/material": "^7.3.5",
    "@mui/system": "^7.3.5",
    "@mui/x-date-pickers": "^8.19.0",
    "@mui/x-tree-view": "^8.19.0",
    "@pixi/graphics": "^7.4.3",
    "@pixi/graphics-extras": "^7.4.3",
    "@reduxjs/toolkit": "^2.10.1",
    "chroma-js": "^3.1.2",
    "dayjs": "^1.11.19",
    "i18next": "^25.6.3",
    "lodash": "^4.17.21",
    "pixi.js": "^8.14.3",
    "prop-types": "^15.8.1",
    "react": "^19.2.0",
    "react-colorful": "^5.6.1",
    "react-dom": "^19.2.0",
    "react-i18next": "^16.3.5",
    "react-redux": "^9.2.0",
    "react-router-dom": "^7.9.6",
    "recharts": "^3.4.1",
    "seedrandom": "^3.0.5",
    "smooth-scroll": "^16.1.3"
  },
  "devDependencies": {
    "@eslint/js": "^9.39.1",
    "@types/react": "^19.2.6",
    "@vitejs/plugin-react": "^5.1.1",
    "eslint": "^9.39.1",
    "eslint-plugin-react-hooks": "^7.0.1",
    "eslint-plugin-react-refresh": "^0.4.24",
    "globals": "^16.5.0",
    "vite": "7.2.4",
    "vite-plugin-svgr": "^4.5.0"
  }
}

In the .NET 8.0 side project nothing has changed:


This is the url generated that fails:
https://localhost:5443/connect/authorize?client_id=test.spa&redirect_uri=https%3A%2F%2Flocalhost%3A7283%2Fsignin-oidc&response_type=code&scope=openid%20profile%20api%20offline_access%20roles&code_challenge=1IriNBnqx_IQHUggFw2Eoyn6dxEMahdwpLNTAo1jU7c&code_challenge_method=S256&nonce=%7Bnonce%7D&state=%7Bstate%7D&x-client-SKU=ID_NET8_0&x-client-ver=8.0.1.0
Can you advise us

Reproduction

n/a

Steps to reproduce

See version clash detailed above

System Info

<PackageReference Include="Duende.BFF" Version="3.0.0" />
<PackageReference Include="Duende.BFF.Yarp" Version="3.0.0" />
"vite": "7.2.4"

Used Package Manager

npm

Logs

No response

Validations

• Follow our Code of Conduct
• Read the Contributing Guidelines.
• Read the docs.
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
• Make sure this is a Vite issue and not a framework-specific issue. For example, if it's a Vue SFC related bug, it should likely be reported to vuejs/core instead.
• Check that this is a concrete bug. For Q&A open a GitHub Discussion or join our Discord Chat Server.
• The provided reproduction is a minimal reproducible example of the bug.