Uploaded image for project: 'OpenId Connect'
  1. OpenId Connect
  2. OIDC-261

Add support for PKCE in the authenticator

    XMLWordPrintable

Details

    • New Feature
    • Resolution: Unresolved
    • Major
    • None
    • 2.19.3
    • Authenticator
    • None
    • Unknown

    Description

      It would be interesting to implement this extension to the protocol.

      For inspiration:

      For the implementation: OIDC SDK seems to have support for it already (see for example AuthenticationRequest.Builder#codeChallenge), so I guess the first thing to start with is storing a code verifier and pass it to the request somewhere in https://github.com/xwiki-contrib/oidc/blob/oidc-2.19.3/oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/OIDCAuthServiceImpl.java#L251-L271.

      Attachments

        Activity

          People

            Unassigned Unassigned
            tmortagne Thomas Mortagne
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated: