How do I create and app using PKCE Authorization Code using the API

Questions
2

You’ll need to do three things when creating the OIDC app

  1. set the “token_endpoint_auth_method” to “none” (so that PKCE auth is used)
  2. set “application_type” to “browser” to make a SPA type app (or ‘native’, if making a Native app)
  3. set “response_types” to “code”

Example request body that should work:

{
    "name": "oidc_client",
    "label": "Sample PKCE App",
    "signOnMode": "OPENID_CONNECT",
    "credentials": {
      "oauthClient": {
        "token_endpoint_auth_method": "none"
      }
    },
    "settings": {
      "oauthClient": {
        "redirect_uris": [
          "http://localhost:8080/login/callback"
        ],
        "response_types": [
          "code"
        ],
        "grant_types": [
          "authorization_code"
        ],
        "application_type": "browser"
      }
    }
}
1 Like