PKCE support (code_challenge)

[diegosasw]

This library looks great, thanks. I am following the playground example.

I am using a Duende Identity Server OIDC provider and I have adapted the sample to make it work.

However I had to disable PKCE in the OIDC provider not to get an error code_challenge is missing

I am wondering whether the library supports PKCE. I know oidc-client-ts does.

[aborn]

Currently, the package doesn't support PKCE.

[karatekaneen]

@aborn What would need to be changed in order to support pkce?

[aborn]

As pkce, you needs pass Code Verifier and Code Challenge params for Authorization Code Flow . You can have try, and give PR.

[DiogoCunhaMoreira]

Hello guys,

Any news about this issue?

Thanks a lot! Diogo

[karatekaneen]

No news from me. We chose another project for our authentication unfortunately so didn't ever get to build the PKCE part for this one.

[VictorioBerra]

PKCE is the standard now. Need support!