Implementation of the Authorization Code with PKCE flow for public clients

RichardKnop / go-oauth2-server

A standalone, specification-compliant, OAuth2 server written in Golang.

Mozilla Public License 2.0

2.12k stars 315 forks source link

Implementation of the Authorization Code with PKCE flow for public clients #65

Open keyz182 opened 4 years ago

keyz182 commented 4 years ago

This is a (hopefully) complete implementation of the Authorization Code with PKCE flow (https://oauth.net/2/pkce/).

obukhov commented 3 years ago

Any plans to merge it? authorization code grant type is now considered recommended one for public clients (i.e. SPA, mobile clients) and meat to replace implicit flow. So this PR gonna add quite some value.