Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Support RFC7636 PKCE in the OAuth 2.0 flow. (#14750) | Patrick Cloke | 2023-01-04 | 1 | -0/+1 |
PKCE can protect against certain attacks and is enabled by default. Support can be controlled manually by setting the pkce_method of each oidc_providers entry to 'auto' (default), 'always', or 'never'. This is required by Twitter OAuth 2.0 support. |