Does Hydra support PKCE?


#1

I’m new to Hydra. Does Hydra support PKCE? Specifically,
(1) can Hydra accept a code_challenge parameter in the authorization request, and validate it against the code_verifier parameter in the authorization code exchange?
(2) can Hydra require that requests from certain clients must include a code_challenge?


#2

Not yet, but there’s an issue open for that: https://github.com/ory/fosite/issues/213


#3

Thanks! I’ll follow the issue.