Glossary · Security & identity
PKCE
Proof Key for Code Exchange
PKCE is the OAuth extension in which the client sends a hashed secret with the authorisation request and the original with the token request, so an intercepted code cannot be redeemed by anyone else.
It is mandatory in OAuth 2.1 and SMART App Launch 2, especially for mobile and browser apps that cannot keep a client secret.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →