diff --git a/website/content/docs/auth/jwt/index.mdx b/website/content/docs/auth/jwt/index.mdx index 7b9b0097cf4a..7b74dfdf6c08 100644 --- a/website/content/docs/auth/jwt/index.mdx +++ b/website/content/docs/auth/jwt/index.mdx @@ -117,7 +117,8 @@ JSON Pointer can be used as a selector. Refer to the This section covers the setup and use of OIDC roles. If a JWT is to be provided directly, refer to the [JWT Authentication](/docs/auth/jwt#jwt-authentication) section below. Basic familiarity with [OIDC concepts](https://developer.okta.com/blog/2017/07/25/oidc-primer-part-1) -is assumed. +is assumed. The Authorization Code flow makes use of the Proof Key for Code +Exchange (PKCE) extension. Vault includes two built-in OIDC login flows: the Vault UI, and the CLI using a `vault login`.