harphield

OAuth2\AbstractProvider::generatePKCECodeVerifier generates code_verifier with an invalid length

1

Per the OAuth PKCE RFC: https://datatracker.ietf.org/doc/html/rfc7636#section-4.1 > code_verifier = high-entropy cryptographic random STRING using the unreserved characters [A-Z] / [a-z] / [0-9] / "-" / "." / "_" / "~"...