OtherActive

OAuth 2.0 PKCE

PKCE (Proof Key for Code Exchange) is an extension to the Authorization Code flow to prevent CSRF and authorization code injection attacks.

Open source page ↗

Field note

What it does

PKCE was originally designed for mobile/native applications but is now recommended for all OAuth clients, including web applications.

Capabilities

Available capabilities

PKCE Extension

Tags

Tags

SecurityOAuth 2.0

Ways to use it

Ways to use it

No integrations filed yet.

Product features

Product features

Additional Extensions

Code and Services

Community Resources

Discovery and Registration

Draft Specs

High Security OAuth

Mobile and Other Devices

OAuth 2.0

OAuth 2.1

Protocols Built on OAuth 2.0

Related Work from Other Communities

Token and Token Management