ory / fosite / 968

86%

master: 71%

push

travis-ci

handler: Adds PKCE implementation for none and S256 (#246)

This patch adds support for PKCE (https://tools.ietf.org/html/rfc7636) which is used by native apps (mobile) and prevents eavesdropping attacks against authorization codes.

PKCE is enabled by default but not enforced. Challenge method plain is disabled by default. Both settings can be changed using `compose.Config.EnforcePKCE` and `compose.config.EnablePKCEPlainChallengeMethod`.

Closes #213

118 of 118 new or added lines in 4 files covered. (100.0%)

2199 of 2571 relevant lines covered (85.53%)

141.22 hits per line