[CXF-8653] Provide an easy way to require PKCE for the AuthorizationCodeGrantHandler - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.4.6, 3.5.1
Component/s: None
Labels:
None

Estimated Complexity:
Unknown

Description

This task is to provide an easy way to require PKCE for the OAuth AuthorizationCodeGrantHandler. A new property "requireCodeVerifier" can be set on this class, which will then require the code verifier / PKCE for all clients.

Attachments

Activity

People

Assignee:: Colm O hEigeartaigh

Reporter:: Colm O hEigeartaigh

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/Feb/22 11:05

Updated:: 18/Sep/23 18:48

Resolved:: 04/Feb/22 11:07