https://oa.dnc.global/Verification-Key-for-Code-Exchange-PKCE.html OAuthSD can implement the Authorization code + PKCE flow. The main difference between the Authorization code + PKCE flow and the standard flow is that the client does not provide the application secret, but a verification key. On the other hand, since there is no longer a secret, there is no longer any identification of the application implemented by the client, which is therefore of the "public" type. The method avoids propagating a secret, but does not provide any new information on the (…) en SPIP - www.spip.net