You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Checking the current implementation, one could argue that "it works" in the sense that the server currently ignores any PKCE challenge and verifier codes. If at any point it becomes critical that an authorization request is actually rejected for an invalid verifier code, please write a comment here, otherwise this will not be implemented for now.
see https://tools.ietf.org/html/rfc7636
The text was updated successfully, but these errors were encountered: