auth0-golang-web-app icon indicating copy to clipboard operation
auth0-golang-web-app copied to clipboard

Published 20 hours ago • verified publisher icon auth0-samples

Add PKCE (RFC 7636)

Open eikemeier opened this issue 2 years ago • 1 comments
trafficstars

OAuth 2.0 security best current practice draft recommends using PKCE: https://www.ietf.org/archive/id/draft-ietf-oauth-security-topics-22.html#section-2.1.1-2.2.1

There is a feature request to integrate PKCE into golang.org/x/oauth2, but currently no native support.

eikemeier avatar Jun 04 '23 10:06 eikemeier

Thanks for the PR @eikemeier, let me discuss with the team how we'd like to approach this (we tend to try and keep the samples aligned with their quickstart) and get back to you.

ewanharris avatar Oct 09 '23 14:10 ewanharris