Problem/Motivation

Social Auth currently only supports OAuth2 for private clients with a client ID and secret key. Public clients using Proof Key for Code Exchange (PKCE) use only a public client ID and no secret key.

Proposed resolution

Add support for getting and setting a PKCE code that can be used by the underlying OAuth2 client for code challenge and verification.

Remaining tasks

Create and merge a PR.

API changes

Add a new uses_public_client_id option to the network plugin configuration. Implementers can use this option to indicate their client uses a public Client ID and does not require a secret key,

Issue fork social_auth-3487650

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

wells created an issue. See original summary.

wells opened merge request !33

  • wells committed abcdd2e4 on 4.2.x 
    Issue #3487650 by wells: Add support for public clients and PKCE
wells’s picture

wells
he/him/his
Primary language English
Location Seattle, WA
commented
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.