IETF RFC 7636
Proof Key for Code Exchange by OAuth Public Clients
active, Most Current
Buy Now
| Organization: | IETF |
| Publication Date: | 1 September 2015 |
| Status: | active |
| Page Count: | 20 |
scope:
OAuth 2.0 public clients utilizing the Authorization Code Grant are susceptible to the authorization code interception attack. This specification describes the attack as well as a technique to mitigate against the threat through the use of Proof Key for Code Exchange (PKCE, pronounced "pixy").
Document History
IETF RFC 7636
September 1, 2015
Proof Key for Code Exchange by OAuth Public Clients
OAuth 2.0 public clients utilizing the Authorization Code Grant are susceptible to the authorization code interception attack. This specification describes the attack as well as a technique to...