0b279b2bf2
* Create rule S7164 * Initial content * Additional content --------- Co-authored-by: jamie-anderson-sonarsource <jamie-anderson-sonarsource@users.noreply.github.com> Co-authored-by: Jamie Anderson <127742609+jamie-anderson-sonarsource@users.noreply.github.com>
7 lines
264 B
Plaintext
7 lines
264 B
Plaintext
**Use OAuth 2.0 PKCE**
|
|
|
|
Proof Key for Code Exchange (PKCE, RFC 7636) is an extension to OAuth 2.0. It
|
|
helps to protect authentication tokens when the `client_secret` value cannot be
|
|
kept secure, such as mobile applications and JavaScript single page
|
|
applications.
|