Cross Domain · security identity
PKCE (Proof Key for Code Exchange) (RFC 7636)
PKCE is an OAuth extension that protects the authorization code flow against interception. The client generates a secret verifier, sends its hash with the authorization request, and presents the verifier when redeeming the code — so an attacker who steals the code cannot exchange it.
Also known as PKCE (Proof Key for Code Exchange), RFC 7636.
Providers that carry PKCE (Proof Key for Code Exchange) 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements PKCE (Proof Key for Code Exchange) and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.