DEV Community

Discussion on: Understanding OAuth Authorization Flows

Collapse
johanneslichtenberger profile image
Johannes Lichtenberger

Do you know if Keycloak is already supporting it?

Collapse
rossdrew profile image
Ross

PKCE is supported in KeyCloak in Implicit flow only, currently still being worked on to apply to all flows.

Collapse
johanneslichtenberger profile image
Johannes Lichtenberger

Ah, thanks :-)

Collapse
remotesynth profile image
Brian Rinaldi Author

I'm not personally familiar with keycloak but I was able to find a this thread by doing a search on their site which seems to show there was at least a branch that supported PKCE as of last year. lists.jboss.org/pipermail/keycloak...

Collapse
johanneslichtenberger profile image
Johannes Lichtenberger

Thanks for your research :-)