-
Notifications
You must be signed in to change notification settings - Fork 5.3k
OAuth2 filter: Proof Key for Code Exchange (PKCE) #35230
Copy link
Copy link
Closed
Labels
area/oauthenhancementFeature requests. Not bugs or questions.Feature requests. Not bugs or questions.no stalebotDisables stalebot from closing an issueDisables stalebot from closing an issue
Description
Title: OAuth2 filter: Proof Key for Code Exchange (PKCE)
Description:
Describe the desired behavior, what scenario it enables and how it
would be used.
PKCE (Proof Key for Code Exchange) is an extension to the OAuth 2.0 authorization code flow that can prevent the authorization code interception attack. Implementing it can significantly enhance the security of the OAuth2 filter .
[optional Relevant Links:]
Any extra documentation required to understand the issue.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
area/oauthenhancementFeature requests. Not bugs or questions.Feature requests. Not bugs or questions.no stalebotDisables stalebot from closing an issueDisables stalebot from closing an issue