PKCE

securitycryptography

Stands for: Proof Key for Code Exchange

An OAuth extension that protects the authorization-code flow.

Proof Key for Code Exchange (RFC 7636) binds an authorization code to the client that requested it, using a one-time secret. It stops an intercepted code from being redeemed by an attacker and is now standard for public OAuth clients.

Also known as: pkce

← All glossary entries