• Links to specification:
• Reason for PKCE
• The attack vector PKCE secures for:
• How can PKCE prevent this?
• Enable PKCE in Doorkeeper
• PKCE and refresh tokens