Network.OAuth2.Experiment

This module contains a new way of doing OAuth2 authorization and authentication in order to obtain Access Token and maybe Refresh Token base on rfc6749.

This module will become default in future release. (TBD but likely 3.0).

The key concept/change is to introduce the GrantTypeFlow, which determines the entire work flow per spec. Each work flow will have slight different request parameters, which often time you'll see different configuration when creating OAuth2 application in the IdP developer application page.

Here are supported flows

1. Authorization Code. This flow requires authorize call to obtain an authorize code, then exchange the code for tokens.
2. Resource Owner Password. This flow only requires to hit token endpoint with, of course, username and password, to obtain tokens.
3. Client Credentials. This flow also only requires to hit token endpoint but with different parameters. Client credentials flow does not involve an end user hence you won't be able to hit userinfo endpoint with access token obtained.
4. PKCE (rfc7636). This is enhancement on top of authorization code flow.

Implicit flow is not supported because it is more for SPA (single page app) and more or less obsolete by Authorization Code flow with PKCE.

Here is quick sample for how to use vocabularies from this new module.

Firstly, initialize your IdP (use google as example) and the application.

{-# LANGUAGE DataKinds #-}

data Google = Google deriving (Eq, Show)
googleIdp :: Idp Google
googleIdp =
  Idp
    { idpFetchUserInfo = authGetJSON @(IdpUserInfo Google),
      idpAuthorizeEndpoint = [uri|https://accounts.google.com/o/oauth2/v2/auth|],
      idpTokenEndpoint = [uri|https://oauth2.googleapis.com/token|],
      idpUserInfoEndpoint = [uri|https://www.googleapis.com/oauth2/v2/userinfo|]
    }

fooApp :: IdpApplication 'AuthorizationCode Google
fooApp =
  AuthorizationCodeIdpApplication
    { idpAppClientId = "xxxxx",
      idpAppClientSecret = "xxxxx",
      idpAppScope =
        Set.fromList
          [ "https://www.googleapis.com/auth/userinfo.email",
            "https://www.googleapis.com/auth/userinfo.profile"
          ],
      idpAppAuthorizeState = "CHANGE_ME",
      idpAppAuthorizeExtraParams = Map.empty,
      idpAppRedirectUri = [uri|http://localhost/oauth2/callback|],
      idpAppName = "default-google-App",
      idpAppTokenRequestAuthenticationMethod = ClientSecretBasic,
      idp = googleIdp
    }

Secondly, construct the authorize URL.

authorizeUrl = mkAuthorizeRequest fooApp

Thirdly, after a successful redirect with authorize code, you could exchange for access token

mgr <- liftIO $ newManager tlsManagerSettings
tokenResp <- conduitTokenRequest fooApp mgr authorizeCode

Lastly, you probably like to fetch user info

conduitUserInfoRequest fooApp mgr (accessToken tokenResp)

Also you could find example from hoauth2-providers-tutorials module.

Grant Type

data GrantTypeFlow

Constructors

AuthorizationCode

https://www.rfc-editor.org/rfc/rfc6749#section-4.1

ResourceOwnerPassword

https://www.rfc-editor.org/rfc/rfc6749#section-4.3

ClientCredentials

https://www.rfc-editor.org/rfc/rfc6749#section-4.4

JwtBearer

https://www.rfc-editor.org/rfc/rfc7523.html#section-2.1

Response Type value

class ToResponseTypeValue (a :: GrantTypeFlow) where

Methods

toResponseTypeValue :: IsString b => b

Instances

ToResponseTypeValue 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Methods

toResponseTypeValue :: IsString b => b

toResponseTypeParam :: forall a b req. (ToResponseTypeValue a, IsString b) => req a -> Map b b

Grant Type value

newtype UrnOAuthParam a

Constructors

UrnOAuthParam a

data GrantTypeValue

Grant type query parameter has association with GrantTypeFlow but not completely strict.

e.g. Both AuthorizationCode and ResourceOwnerPassword flow could support refresh token flow.

Constructors

GTAuthorizationCode

GTPassword

GTClientCredentials

GTRefreshToken

GTJwtBearer

Instances

Show GrantTypeValue

Defined in Network.OAuth2.Experiment.Types

Methods

showsPrec :: Int -> GrantTypeValue -> ShowS

show :: GrantTypeValue -> String

showList :: [GrantTypeValue] -> ShowS

Eq GrantTypeValue

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: GrantTypeValue -> GrantTypeValue -> Bool

(/=) :: GrantTypeValue -> GrantTypeValue -> Bool

ToQueryParam GrantTypeValue

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: GrantTypeValue -> Map Text Text

Scope

newtype Scope

Constructors

Scope

Fields

• unScope :: Text

Instances

IsString Scope

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> Scope

Show Scope

Defined in Network.OAuth2.Experiment.Types

Methods

showsPrec :: Int -> Scope -> ShowS

show :: Scope -> String

showList :: [Scope] -> ShowS

Eq Scope

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: Scope -> Scope -> Bool

(/=) :: Scope -> Scope -> Bool

Ord Scope

Defined in Network.OAuth2.Experiment.Types

Methods

compare :: Scope -> Scope -> Ordering

(<) :: Scope -> Scope -> Bool

(<=) :: Scope -> Scope -> Bool

(>) :: Scope -> Scope -> Bool

(>=) :: Scope -> Scope -> Bool

max :: Scope -> Scope -> Scope

min :: Scope -> Scope -> Scope

ToQueryParam (Set Scope)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Set Scope -> Map Text Text

Credentials

newtype ClientId

Constructors

ClientId

Fields

• unClientId :: Text

Instances

IsString ClientId

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> ClientId

Show ClientId

Defined in Network.OAuth2.Experiment.Types

Methods

showsPrec :: Int -> ClientId -> ShowS

show :: ClientId -> String

showList :: [ClientId] -> ShowS

Eq ClientId

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: ClientId -> ClientId -> Bool

(/=) :: ClientId -> ClientId -> Bool

ToQueryParam ClientId

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: ClientId -> Map Text Text

newtype ClientSecret

Can be either "Client Secret" or JWT base on client authentication method

Constructors

ClientSecret

Fields

• unClientSecret :: Text

Instances

IsString ClientSecret

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> ClientSecret

Eq ClientSecret

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: ClientSecret -> ClientSecret -> Bool

(/=) :: ClientSecret -> ClientSecret -> Bool

ToQueryParam ClientSecret

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: ClientSecret -> Map Text Text

toOAuth2Key :: ClientId -> ClientSecret -> OAuth2

In order to reuse some methods from legacy Network.OAuth.OAuth2. Will be removed when Experiment module becomes default.

newtype RedirectUri

Constructors

RedirectUri

Fields

• unRedirectUri :: URI

Instances

Eq RedirectUri

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: RedirectUri -> RedirectUri -> Bool

(/=) :: RedirectUri -> RedirectUri -> Bool

ToQueryParam RedirectUri

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: RedirectUri -> Map Text Text

newtype AuthorizeState

Constructors

AuthorizeState

Fields

• unAuthorizeState :: Text

Instances

IsString AuthorizeState

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> AuthorizeState

Eq AuthorizeState

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: AuthorizeState -> AuthorizeState -> Bool

(/=) :: AuthorizeState -> AuthorizeState -> Bool

ToQueryParam AuthorizeState

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: AuthorizeState -> Map Text Text

newtype Username

Constructors

Username

Fields

• unUsername :: Text

Instances

IsString Username

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> Username

Eq Username

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: Username -> Username -> Bool

(/=) :: Username -> Username -> Bool

ToQueryParam Username

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Username -> Map Text Text

newtype Password

Constructors

Password

Fields

• unPassword :: Text

Instances

IsString Password

Defined in Network.OAuth2.Experiment.Types

Methods

fromString :: String -> Password

Eq Password

Defined in Network.OAuth2.Experiment.Types

Methods

(==) :: Password -> Password -> Bool

(/=) :: Password -> Password -> Bool

ToQueryParam Password

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Password -> Map Text Text

Query parameters

class ToQueryParam a where

Methods

toQueryParam :: a -> Map Text Text

Instances

ToQueryParam ExchangeToken

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: ExchangeToken -> Map Text Text

ToQueryParam RefreshToken

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: RefreshToken -> Map Text Text

ToQueryParam CodeChallenge

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeChallenge -> Map Text Text

ToQueryParam CodeChallengeMethod

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeChallengeMethod -> Map Text Text

ToQueryParam CodeVerifier

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeVerifier -> Map Text Text

ToQueryParam AuthorizeState

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: AuthorizeState -> Map Text Text

ToQueryParam ClientId

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: ClientId -> Map Text Text

ToQueryParam ClientSecret

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: ClientSecret -> Map Text Text

ToQueryParam GrantTypeValue

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: GrantTypeValue -> Map Text Text

ToQueryParam Password

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Password -> Map Text Text

ToQueryParam RedirectUri

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: RedirectUri -> Map Text Text

ToQueryParam Username

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Username -> Map Text Text

ToQueryParam (Set Scope)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Set Scope -> Map Text Text

ToQueryParam (AuthorizationRequest 'AuthorizationCode)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: AuthorizationRequest 'AuthorizationCode -> Map Text Text

ToQueryParam (RefreshTokenRequest 'AuthorizationCode)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: RefreshTokenRequest 'AuthorizationCode -> Map Text Text

ToQueryParam (TokenRequest 'AuthorizationCode)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: TokenRequest 'AuthorizationCode -> Map Text Text

ToQueryParam (TokenRequest 'ClientCredentials)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: TokenRequest 'ClientCredentials -> Map Text Text

ToQueryParam (TokenRequest 'JwtBearer)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: TokenRequest 'JwtBearer -> Map Text Text

ToQueryParam (TokenRequest 'ResourceOwnerPassword)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: TokenRequest 'ResourceOwnerPassword -> Map Text Text

ToQueryParam a => ToQueryParam (Maybe a)

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: Maybe a -> Map Text Text

Authorization and Token Requests types

class HasAuthorizeRequest (a :: GrantTypeFlow) where

Associated Types

data AuthorizationRequest a

type MkAuthorizationRequestResponse a

Methods

mkAuthorizeRequestParameter :: IdpApplication a i -> AuthorizationRequest a

mkAuthorizeRequest :: IdpApplication a i -> MkAuthorizationRequestResponse a

Instances

HasAuthorizeRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Associated Types

data AuthorizationRequest 'AuthorizationCode

type MkAuthorizationRequestResponse 'AuthorizationCode

Methods

mkAuthorizeRequestParameter :: IdpApplication 'AuthorizationCode i -> AuthorizationRequest 'AuthorizationCode

mkAuthorizeRequest :: IdpApplication 'AuthorizationCode i -> MkAuthorizationRequestResponse 'AuthorizationCode

class HasTokenRequest (a :: GrantTypeFlow) where

Associated Types

data TokenRequest a

Each GrantTypeFlow has slightly different request parameter to /token endpoint.

type WithExchangeToken a b

Only 'AuthorizationCode flow (but not resource owner password nor client credentials) will use ExchangeToken in the token request create type family to be explicit on it. with 'type instance WithExchangeToken a b = b' implies no exchange token v.s. 'type instance WithExchangeToken a b = ExchangeToken -> b' implies needing an exchange token

Methods

mkTokenRequest :: IdpApplication a i -> WithExchangeToken a (TokenRequest a)

conduitTokenRequest :: MonadIO m => IdpApplication a i -> Manager -> WithExchangeToken a (ExceptT TokenRequestError m OAuth2Token)

Instances

HasTokenRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Associated Types

data TokenRequest 'AuthorizationCode

type WithExchangeToken 'AuthorizationCode b

Methods

mkTokenRequest :: IdpApplication 'AuthorizationCode i -> WithExchangeToken 'AuthorizationCode (TokenRequest 'AuthorizationCode)

conduitTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'AuthorizationCode i -> Manager -> WithExchangeToken 'AuthorizationCode (ExceptT TokenRequestError m OAuth2Token)

HasTokenRequest 'ClientCredentials

Defined in Network.OAuth2.Experiment.Types

Associated Types

data TokenRequest 'ClientCredentials

type WithExchangeToken 'ClientCredentials b

Methods

mkTokenRequest :: IdpApplication 'ClientCredentials i -> WithExchangeToken 'ClientCredentials (TokenRequest 'ClientCredentials)

conduitTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'ClientCredentials i -> Manager -> WithExchangeToken 'ClientCredentials (ExceptT TokenRequestError m OAuth2Token)

HasTokenRequest 'JwtBearer

Defined in Network.OAuth2.Experiment.Types

Associated Types

data TokenRequest 'JwtBearer

type WithExchangeToken 'JwtBearer b

Methods

mkTokenRequest :: IdpApplication 'JwtBearer i -> WithExchangeToken 'JwtBearer (TokenRequest 'JwtBearer)

conduitTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'JwtBearer i -> Manager -> WithExchangeToken 'JwtBearer (ExceptT TokenRequestError m OAuth2Token)

HasTokenRequest 'ResourceOwnerPassword

Defined in Network.OAuth2.Experiment.Types

Associated Types

data TokenRequest 'ResourceOwnerPassword

type WithExchangeToken 'ResourceOwnerPassword b

Methods

mkTokenRequest :: IdpApplication 'ResourceOwnerPassword i -> WithExchangeToken 'ResourceOwnerPassword (TokenRequest 'ResourceOwnerPassword)

conduitTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'ResourceOwnerPassword i -> Manager -> WithExchangeToken 'ResourceOwnerPassword (ExceptT TokenRequestError m OAuth2Token)

class HasPkceAuthorizeRequest (a :: GrantTypeFlow) where

Methods

mkPkceAuthorizeRequest :: MonadIO m => IdpApplication a i -> m (Text, CodeVerifier)

Instances

HasPkceAuthorizeRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Methods

mkPkceAuthorizeRequest :: MonadIO m => IdpApplication 'AuthorizationCode i -> m (Text, CodeVerifier)

class HasPkceTokenRequest (b :: GrantTypeFlow) where

Methods

conduitPkceTokenRequest :: MonadIO m => IdpApplication b i -> Manager -> (ExchangeToken, CodeVerifier) -> ExceptT TokenRequestError m OAuth2Token

Instances

HasPkceTokenRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Methods

conduitPkceTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'AuthorizationCode i -> Manager -> (ExchangeToken, CodeVerifier) -> ExceptT TokenRequestError m OAuth2Token

class HasRefreshTokenRequest (a :: GrantTypeFlow) where

Associated Types

data RefreshTokenRequest a

https://www.rfc-editor.org/rfc/rfc6749#page-47

Methods

mkRefreshTokenRequest :: IdpApplication a i -> RefreshToken -> RefreshTokenRequest a

conduitRefreshTokenRequest :: MonadIO m => IdpApplication a i -> Manager -> RefreshToken -> ExceptT TokenRequestError m OAuth2Token

Instances

HasRefreshTokenRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Associated Types

data RefreshTokenRequest 'AuthorizationCode

Methods

mkRefreshTokenRequest :: IdpApplication 'AuthorizationCode i -> RefreshToken -> RefreshTokenRequest 'AuthorizationCode

conduitRefreshTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'AuthorizationCode i -> Manager -> RefreshToken -> ExceptT TokenRequestError m OAuth2Token

HasRefreshTokenRequest 'ResourceOwnerPassword

TODO: TBD

Defined in Network.OAuth2.Experiment.Types

Associated Types

data RefreshTokenRequest 'ResourceOwnerPassword

Methods

mkRefreshTokenRequest :: IdpApplication 'ResourceOwnerPassword i -> RefreshToken -> RefreshTokenRequest 'ResourceOwnerPassword

conduitRefreshTokenRequest :: forall (m :: Type -> Type) i. MonadIO m => IdpApplication 'ResourceOwnerPassword i -> Manager -> RefreshToken -> ExceptT TokenRequestError m OAuth2Token

User Info types

type family IdpUserInfo a

class HasUserInfoRequest (a :: GrantTypeFlow) where

Methods

conduitUserInfoRequest :: FromJSON (IdpUserInfo i) => IdpApplication a i -> Manager -> AccessToken -> ExceptT ByteString IO (IdpUserInfo i)

Instances

HasUserInfoRequest 'AuthorizationCode

Defined in Network.OAuth2.Experiment.Types

Methods

conduitUserInfoRequest :: FromJSON (IdpUserInfo i) => IdpApplication 'AuthorizationCode i -> Manager -> AccessToken -> ExceptT ByteString IO (IdpUserInfo i)

HasUserInfoRequest 'JwtBearer

Defined in Network.OAuth2.Experiment.Types

Methods

conduitUserInfoRequest :: FromJSON (IdpUserInfo i) => IdpApplication 'JwtBearer i -> Manager -> AccessToken -> ExceptT ByteString IO (IdpUserInfo i)

HasUserInfoRequest 'ResourceOwnerPassword

Defined in Network.OAuth2.Experiment.Types

Methods

conduitUserInfoRequest :: FromJSON (IdpUserInfo i) => IdpApplication 'ResourceOwnerPassword i -> Manager -> AccessToken -> ExceptT ByteString IO (IdpUserInfo i)

Idp App

data Idp a

Shall IdpApplication has a field of 'Idp a'??

Constructors

Idp

Fields

• idpUserInfoEndpoint :: URI
• idpAuthorizeEndpoint :: URI
• idpTokenEndpoint :: URI
• idpFetchUserInfo :: forall m. (FromJSON (IdpUserInfo a), MonadIO m) => Manager -> AccessToken -> URI -> ExceptT ByteString m (IdpUserInfo a)

Idp App Config

data family IdpApplication (a :: GrantTypeFlow) (i :: Type)

Instances

data IdpApplication 'AuthorizationCode i

An Application that supports "Authorization code" flow

Defined in Network.OAuth2.Experiment.Types

data IdpApplication 'AuthorizationCode i = AuthorizationCodeIdpApplication {

• idpAppName :: Text
• idpAppClientId :: ClientId
• idpAppClientSecret :: ClientSecret
• idpAppScope :: Set Scope
• idpAppRedirectUri :: URI
• idpAppAuthorizeState :: AuthorizeState
• idpAppAuthorizeExtraParams :: Map Text Text
• idpAppTokenRequestAuthenticationMethod :: ClientAuthenticationMethod
• idp :: Idp i

}

data IdpApplication 'ClientCredentials i

Defined in Network.OAuth2.Experiment.Types

data IdpApplication 'ClientCredentials i = ClientCredentialsIDPApplication {

• idpAppClientId :: ClientId
• idpAppClientSecret :: ClientSecret
• idpAppTokenRequestAuthenticationMethod :: ClientAuthenticationMethod
• idpAppName :: Text
• idpAppScope :: Set Scope
• idpAppTokenRequestExtraParams :: Map Text Text
• idp :: Idp i

}

data IdpApplication 'JwtBearer i

An Application that supports "Authorization code" flow

Defined in Network.OAuth2.Experiment.Types

data IdpApplication 'JwtBearer i = JwtBearerIdpApplication {

• idpAppName :: Text
• idpAppJwt :: ByteString
• idp :: Idp i

}

data IdpApplication 'ResourceOwnerPassword i

Defined in Network.OAuth2.Experiment.Types

data IdpApplication 'ResourceOwnerPassword i = ResourceOwnerPasswordIDPApplication {

• idpAppClientId :: ClientId
• idpAppClientSecret :: ClientSecret
• idpAppName :: Text
• idpAppScope :: Set Scope
• idpAppUserName :: Username
• idpAppPassword :: Password
• idpAppTokenRequestExtraParams :: Map Text Text
• idp :: Idp i

}

Authorization Code flow

JWTBearer

Password flow

Client Credentials flow

mkPkceParam :: MonadIO m => m PkceRequestParam

newtype CodeChallenge

Constructors

CodeChallenge

Fields

• unCodeChallenge :: Text

Instances

ToQueryParam CodeChallenge

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeChallenge -> Map Text Text

newtype CodeVerifier

Constructors

CodeVerifier

Fields

• unCodeVerifier :: Text

Instances

Show CodeVerifier

Defined in Network.OAuth2.Experiment.Pkce

Methods

showsPrec :: Int -> CodeVerifier -> ShowS

show :: CodeVerifier -> String

showList :: [CodeVerifier] -> ShowS

ToQueryParam CodeVerifier

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeVerifier -> Map Text Text

data CodeChallengeMethod

Constructors

S256

Instances

Show CodeChallengeMethod

Defined in Network.OAuth2.Experiment.Pkce

Methods

showsPrec :: Int -> CodeChallengeMethod -> ShowS

show :: CodeChallengeMethod -> String

showList :: [CodeChallengeMethod] -> ShowS

ToQueryParam CodeChallengeMethod

Defined in Network.OAuth2.Experiment.Types

Methods

toQueryParam :: CodeChallengeMethod -> Map Text Text

data PkceRequestParam

Constructors

PkceRequestParam

Fields

• codeVerifier :: CodeVerifier
• codeChallenge :: CodeChallenge
• codeChallengeMethod :: CodeChallengeMethod

  spec says optional but really it shall be s256 or can be omitted? https://datatracker.ietf.org/doc/html/rfc7636#section-4.3