PKCE: What can(not) be protected Admin January 25, 2017 Add Comment OAuth, OpenID Connect, Single Sign-On This post is about PKCE [ RFC7636 ], a protection mechanism for OAuth and OpenIDConnect designed for public clients to detect the aut...