Any plans to support the PKCE OAuth2 flow?

bshaffer / oauth2-server-php

A library for implementing an OAuth2 Server in php

http://bshaffer.github.io/oauth2-server-php-docs

MIT License

3.26k stars 950 forks source link

Any plans to support the PKCE OAuth2 flow? #752

Open CoDanny opened 8 years ago

CoDanny commented 8 years ago

More information here: https://pfelix.wordpress.com/2016/02/15/oauth-2-0-and-pkce/ and here: https://tools.ietf.org/html/rfc7636

bshaffer commented 8 years ago

Hi @CoDanny ! We have no plans yet, but this is an interesting spec, and definitely seems like one worth supporting.

Herz3h commented 7 years ago

Whats the recommended flow to use for native apps if this flow is not available with this library ?

Authorization code with the risk of an app responding to the same scheme registered by own app?

belinde commented 6 years ago

I need to implement PKCE ASAP for a project of mine. Do you have already written something or I have to start from scratch? In the second case what's the better way to submit my solution? A pull request is ok?

dgwyer commented 8 months ago

PKCE support was added in v1.14.0 so this issue can be closed now.