Xero apps with "OAuth 2.0 grant type: Auth code with PKCE"

[onetom]

trafficstars

We are developing a Google Data Studio community connector and we would like to move the Xero report processing into our Clojure backend service, from the current Google Apps Scripts solution.

We would like to use a single, official library, which supports working with Xero apps, which use the PKCE grant type.

We have rolled a bespoke solution, directly in Clojure, using the httpkit and buddy libraries, just so we an at least refresh our access tokens, but it would be great to have a comprehensive interface to all of the Xero API features.

[SidneyAllen]

Hey @onetom - Thank you for the suggestion.

This is the first request we've received for adding PCKE support. I did a little searching on the topic as it relates to our use of https://github.com/googleapis/google-api-java-client

It appears this library is in maintenance mode and PKCE support won't be added. https://github.com/googleapis/google-api-java-client/issues/1100#issuecomment-382981444

If you are not aware of our OpenAPI specs, those are available in this repo for developers to use. https://github.com/XeroAPI/Xero-OpenAPI

Moving to a different OAuth2 library would be a major piece of work, so won't be something we'll action at this time. I will leave this issue open so other developers can register their interest in PKCE support in Java. Please share your use case or tooling that needs this support so we can understand.