Breaking News: Grepper is joining You.com. Read the official announcement!

Authorization code flow with PKCE by Oauth2

Pragya Keshap answered on February 7, 2023 Popularity 5/10 Helpfulness 1/10

answer Authorization code flow with PKCE by Oauth2

Authorization code flow with PKCE by Oauth2

Comment

The Authorization Code Flow + PKCE is an OpenId Connect flow specifically designed to authenticate native or mobile application users. This flow is considered best practice when using Single Page Apps (SPA) or Mobile Apps. PKCE, pronounced “pixy” is an acronym for Proof Key for Code Exchange.

@Bean
public ServerOAuth2AuthorizationRequestResolver pkceResolver(ReactiveClientRegistrationRepository repo) {
    var resolver = new DefaultServerOAuth2AuthorizationRequestResolver(repo);
    resolver.setAuthorizationRequestCustomizer(OAuth2AuthorizationRequestCustomizers.withPkce());
    return resolver;
}

https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow-with-proof-key-for-code-exchange-pkce

Popularity 5/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: authorization flow java pkce

Link to this answer
Share Copy Link