Work

PKCE: Proof Key for Code Exchange

Year: 2025
Type: article
Abstract: As an open standard, OAuth has grown significantly since its initial release in 2007. In 2010, the IETF published it as a standard with RFC 5849, The OAuth 1.0 Protocol. The standard has evolved to solve many complex use cases through a structured standards development process. OAuth has seen many updates in the nearly 20 years since its initial release. This article describes one such update that started as a standalone RFC but has been incorporated into the upcoming OAuth 2.1 specification, "Proof of Key Code Exchange."
Author: Rusty Deaton
Language: English
Open Access status: gold
OpenAlex ID: W4408669734
FWCI:
Cites:
Cited by:
Related to: 10