Skip to main content

Module pkce

Module pkce 

Source
Available on crate feature sso only.
Expand description

PKCE (Proof Key for Code Exchange) helpers โ€” RFC 7636.

Generate a PkceVerifier once per authorization request, store it in the pre-auth session, and pass the derived PkceChallenge in the authorization URL. On the callback, supply the stored verifier string to the token endpoint via code_verifier.

Structsยง

PkceChallenge
SHA-256 base64url challenge derived from the verifier.
PkceVerifier
Cryptographically random code verifier (43โ€“128 base64url chars, per RFC 7636).