Proof Key for Code Exchange (PKCE) Extension

datatracker.ietf.orgsite

Extension of the Authorization Code flow adding security layer against code interception attack.

from

OpenID Connect

added

2026-10-10

likes

0

similar

1. ▲
   PKCE Explained loginradius.com

   site category #iam link ↗

   “PKCE is used to provide one more security layer to the authorization code flow in OAuth and OpenID Connect.”

   
2. ▲
   SPAKE2+ github.com

   tool category #crystal link ↗

   Password Authenticated Key Exchange (PAKE) protocol, comparable to SRP-6a

   
3. ▲
   XKCP github.com

   tool category #cryptography link ↗
   
4. ▲
   portkey portkey.page

   site category #selfhosted link ↗
   
5. ▲
   CakePasskeys plugin github.com

   tool category #cakephp link ↗
6. ▲
   dkeyczar github.com

   tool category #cryptography link ↗

OpenID Connect › Resources > Flows / Grant Types Specifications: “Extension of the Authorization Code flow adding security layer against code interception attack.”