You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Would you consider adding support for optional PKCE in omniauth-oauth2? I've implemented it manually a number of times now and would be happy to submit a PR.
The IETF now recommends the use of PKCE (Proof Key for Code Exchange) to protect OAuth2 code authorization grants.
Would you consider adding support for optional PKCE in
omniauth-oauth2
? I've implemented it manually a number of times now and would be happy to submit a PR.Relevant RFC: https://tools.ietf.org/html/rfc7636
Thanks!
The text was updated successfully, but these errors were encountered: