0

For communication with a given Endpoint (german DATEV), our code is required to make use of PKCE (https://www.rfc-editor.org/rfc/rfc7636).

It's possible to hook into OpenIdConnectEvents.OnRedirectToIdentityProvider and compute and put 'code_challenge' and 'code_challenge_method' data into the given ProtocolMessage.Parameters for transfer into the authorization-query.

Is that the only way to enable PKCE with OpenIdConnect?

Thanks for any hints!

Community
  • 1
  • 1
Sascha
  • 2,193
  • 3
  • 24
  • 38

1 Answers1

0

PKCE is a Native (Desktop or Mobile) Apps solution and it feels like you might not be using the right library for the job.

Could you provide a bit more info about your scenario - such as what type of app you are building - I'll then be happy to point you to a certified library along with some sample code.

halfer
  • 19,824
  • 17
  • 99
  • 186
Gary Archer
  • 22,534
  • 2
  • 12
  • 24