Skip to content

Commit

Permalink
Update docs/src/main/asciidoc/security-oidc-code-flow-authentication.…
Browse files Browse the repository at this point in the history
…adoc

Co-authored-by: George Gastaldi <[email protected]>
  • Loading branch information
sberyozkin and gastaldi authored Jul 26, 2023
1 parent 1e4a22d commit 2355044
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -469,7 +469,7 @@ link:https://datatracker.ietf.org/doc/html/rfc7636[Proof Key for Code Exchange]
While PKCE is of primary importance to public OpenID Connect clients, such as SPA scripts running in a browser, it can also provide an extra level of protection to Quarkus OIDC `web-app` applications.
With PKCE, Quarkus OIDC `web-app` applications are confidential OpenID Connect clients capable of securely storing the client secret and using it to exchange the code for the tokens.

You can enable `PKCE` for your OIDC `web-app` endpoint with a `quarkus.oidc.authentication.pkce-required` property and a 32-character secret whixh is required to encrypt the PKCE code verifier in the state cookie, as shown in the following example:
You can enable `PKCE` for your OIDC `web-app` endpoint with a `quarkus.oidc.authentication.pkce-required` property and a 32-character secret which is required to encrypt the PKCE code verifier in the state cookie, as shown in the following example:

[source, properties]
----
Expand Down

0 comments on commit 2355044

Please sign in to comment.