You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi Dave:
OAuth 2.0 public clients using the authorization code grant are susceptible to the
authorization code interception attack. The PKCE specification( https://tools.ietf.org/html/rfc7636) has been introduced as a way to defend from this attack by establishing a secure binding between the authorization
request and the subsequent token request.
Is Spring-Security-OAuth already implemented PKCE ?
The text was updated successfully, but these errors were encountered:
Hi Dave:
OAuth 2.0 public clients using the authorization code grant are susceptible to the
authorization code interception attack. The PKCE specification( https://tools.ietf.org/html/rfc7636) has been introduced as a way to defend from this attack by establishing a secure binding between the authorization
request and the subsequent token request.
Is Spring-Security-OAuth already implemented PKCE ?
The text was updated successfully, but these errors were encountered: