diff options
| author | Juha Vuolle <juha.vuolle@qt.io> | 2024-04-24 09:00:11 +0300 |
|---|---|---|
| committer | Juha Vuolle <juha.vuolle@qt.io> | 2024-05-22 14:30:41 +0300 |
| commit | 682335147e5a5ee58df41c18d2e0176aea6580fe (patch) | |
| tree | 16c7ab4cf12dd20354090e86d532499cba1ce3d8 /src/oauth/qoauthhttpserverreplyhandler.cpp | |
| parent | a2e22926a568ceb0c11c539913b7d8e188d8b198 (diff) | |
Add support for PKCE
PKCE (RFC 7636) is a MUST in RFC 8252 which lays out OAuth2
best practices for native applications.
PKCE mitigates the risk of authorization code intercepting.
PKCE is only relevant for OAuth2 "Authorization Code" flow,
which is the only OAuth2 flow Qt supports out of the box.
The S256 method is set as the default. Sending out the
PKCE parameters should not cause harm even if the
authorization server didn't support them.
[ChangeLog][QOAuth2AuthorizationCodeFlow] Added PKCE support
and turned it on by default
Fixes: QTBUG-124327
Change-Id: Ic0242be1b8afcd9baa3ff071989d58ddabf753a2
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
Diffstat (limited to 'src/oauth/qoauthhttpserverreplyhandler.cpp')
0 files changed, 0 insertions, 0 deletions