Sean Fraser

Issue with redirect_uri in Authorization Code Grant

2

Using version 9.0.0, using authorization code grant without specifying a redirect_uri in both requests does not seem to be accepted. The spec indicates these are only required if used in...

Add support for authorization code grant with PKCE for distributed apps

2

Add support for "Authorization Code Grant with PKCE" flow to allow distributed apps to securely authenticate with an OAuth server without needing to embed secrets within the distributed application, as...