Interface PkcePair

A PKCE verifier/challenge pair for the authorization-code flow of a public client (one that cannot hold a client secret).

interface PkcePair {
    codeVerifier: string;
    codeChallenge: string;
    codeChallengeMethod: "S256";
}

Properties

codeVerifier: string

Random secret sent with the token request as code_verifier.

codeChallenge: string

BASE64URL(SHA256(codeVerifier)), sent in the authorization URL.

codeChallengeMethod: "S256"

Always S256; EVE SSO does not accept the plain method.