DEV Community

Discussion on: Understanding OAuth Authorization Flows

Collapse
 
johanneslichtenberger profile image
Johannes Lichtenberger

Do you know if Keycloak is already supporting it?

Collapse
 
rossdrew profile image
Ross

PKCE is supported in KeyCloak in Implicit flow only, currently still being worked on to apply to all flows.

Collapse
 
johanneslichtenberger profile image
Johannes Lichtenberger

Ah, thanks :-)

Collapse
 
remotesynth profile image
Brian Rinaldi

I'm not personally familiar with keycloak but I was able to find a this thread by doing a search on their site which seems to show there was at least a branch that supported PKCE as of last year. lists.jboss.org/pipermail/keycloak...

Collapse
 
johanneslichtenberger profile image
Johannes Lichtenberger

Thanks for your research :-)