PKCE support?

??

Hi,

WE have had multiple requests for this feature and have now started development to support PCKE.

As of now, PCKE will support both “plain” and “s256” challenge methods. New features will be accordance to https://tools.ietf.org/html/rfc7636. Proof Key for Code Challenge.

Thank you for your feedback and suggestions. We are expecting new features to be released in a couple of weeks at most.

Hi,

What is the status of this feature?

Thank you
Peter

Just for future reference, since 4.1.7, PKCE support was added to the plugin for both “plain” and “S256” code challenge methods.

Where do you place the PKCE snippet from the documents for WP-auth?

The snippets for PKCE found at https://wp-oauth.com/docs/how-to/wordpress-oauth-server-pkce-support/ are examples of how to use PKCE from a client end. PKCE support is added by default to the WordPress OAuth Server.

Depending on your client codebase, will determine how you implement the flow.