Join 1M+ other developers and:
- Get help and share knowledge in Q&A
- Subscribe to topics of interest
- Get courses & tools that help you grow as a developer or small business owner
DigitalOcean OAuth2 lacks PKCE for Mobile App integration
Last year I created a ticket on DigitalOcean’s OAuth2 implementation https://www.digitalocean.com/community/questions/oauth2-application-callback-url-does-not-allow-mobile-app-url-scheme-types
However, OAuth2 PKCE (Proof Key for Code Exchange - https://oauth.net/2/pkce/) is also missing from the Authorization Flow which is a security layer when used on native apps.
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.×