changing `pkce_required` from true to false does no affect existing applications

[notdodo]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

v1.7.5

Affected Resource(s)

• okta_app_oauth

Expected Behavior

Changing pkce_required from True to False when the application exists the setting is changed

Can this be done in the Admin UI?

Yes

Can this be done in the actual API call?

I don't know

Actual Behavior

Steps to Reproduce

1. create a new OIDC App without pcke_required (the provider automatically set it to true)
2. PKCE is enabled
3. Change it to False from terraform
4. no diffs are shown and no changes are performed

[duytiennguyen-okta]

OKTA internal reference https://oktainc.atlassian.net/browse/OKTA-712704