Re: [Unity-idm-discuss] PKCE for confidential clients

[Sander A. <sa....@fz...>]

Good morning Krzysztof,

thanks for the feedback.

Best regards,
Sander

On Thu, 2024-01-25 at 17:56 +0100, Krzysztof Benedyczak wrote:
> Hi Sander,
> 
> W dniu 23.01.2024 o 10:02, Sander Apweiler pisze:
> > Good morning Krzysztof,
> > good morning Roman,
> > 
> > since PKCE is recommended for confidential clients as well, I
> > wonder if
> > unity supports this for confidential clients, too?
> 
> That was never tested a lot but should work. It is only not possible
> to 
> enforce PKCE for confidential clients: it is opt in. However, if
> during 
> the first OAuth stage (authzCode) PKCE code challenge i used, PKCE
> will 
> be enforced later on.
> 
> Best,
> Krzysztof
> 

-- 
Large-Scale Data Science
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
Geschaeftsfuehrung: Prof. Dr. Astrid Lambrecht (Vorsitzende),
Karsten Beneke (stellv. Vorsitzender), Dr. Ir. Pieter Jansens
-----------------------------------------------------------------------
-----------------------------------------------------------------------