PKCE support

[ilijaNL]

Context

Latest module version

How can we help?

Hello, i wonder how this libary is dealing with Proof Key for Code Exchange (https://oauth.net/2/pkce/) for the authorization code grant. If not, what is the best practise to implement it?

[jonathansamines]

Hello @ilijaNL Unfortunately, this library does not support that extension to the authorization code flow. Pull requests to add such support are welcome.

[aymen3009]

@jonathansamines is there a roadmap for this feature. i can help here

[jonathansamines]

@jonathansamines is there a roadmap for this feature. i can help here

Pull requests to add such support are welcome. Don't have an specific roadmap, but I can review and release contributions if there is enough interest in this feature.

[ackmanx]

I was able to do this with the Spotify API. I essentially followed these instructions with some minor edits: https://developer.spotify.com/documentation/web-api/tutorials/code-pkce-flow

• Looking at authorizeURL in the source, it takes a typed object that appear to just end up as query params. So I put my code_challenge_method and code_challenge params on that object in my app
• getToken does the same thing, so I put my code_verifier param on that one