Skip to main content

Function: verifyPkceChallenge()

verifyPkceChallenge(args): boolean

Defined in: oauth.ts:13

Verifies a PKCE code challenge against a code verifier.

Only the S256 method is accepted. Passing plain or any other method always returns false.

Parameters

ParameterTypeDescription
args{ codeChallenge: string; codeChallengeMethod: string; codeVerifier: string; }-
args.codeChallengestringThe code_challenge value the client sent in the authorization request.
args.codeChallengeMethodstringThe code_challenge_method advertised by the client. Must be S256.
args.codeVerifierstringThe original code_verifier string from the client.

Returns

boolean