Skip to content

Instantly share code, notes, and snippets.

@wilmoore
Last active September 28, 2024 16:42
Show Gist options
  • Select an option

  • Save wilmoore/2bd884702aefa5fc7e14ea1f422a36a3 to your computer and use it in GitHub Desktop.

Select an option

Save wilmoore/2bd884702aefa5fc7e14ea1f422a36a3 to your computer and use it in GitHub Desktop.
Software Engineering :: Web :: Development :: Authorization :: OAuth :: Flow :: pixy

Software Engineering :: Web :: Development :: Authorization :: OAuth :: Flow :: pixy

⪼ Made with 💜 by Polyglot.

brand
related

Authorization Code Flow with Proof Key for Code Exchange (PKCE): This flow is the official recommendation for native clients that cannot keep a client secret. With PKCE, the client dynamically creates a secret and uses the secret again during code exchange, ensuring that only the client that performed the initial request can exchange the code for the access token (”proof of possession”).

The following providers are PKCE-ready:

  • Google
  • Twitter
  • GitLab
  • Spotify
  • Zoom
  • Asana
  • Dropbox are all

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment