Repository navigation

Add PKCE support (RFC 7636) - #85

Open

roborourke wants to merge 21 commits into

WP-API:mainfrom

humanmade:roborourke/pkce-support

Open

Add PKCE support (RFC 7636)#85
roborourke wants to merge 21 commits into
WP-API:mainfrom
humanmade:roborourke/pkce-support

Commits on Sep 17, 2026
- Add PKCE helper class
  roborourke
  committed
  303e2c4
- Bind PKCE challenge to authorization codes
  roborourke
  committed
  f5249aa
- Add per-client PKCE requirement
  roborourke
  committed
  beb6992
- Validate PKCE parameters at the authorisation endpoint
  roborourke
  committed
  bf81aa4
- Verify code_verifier at the token endpoint
  roborourke
  committed
  fdb4c39
- Add PKCE settings to the client admin screen
  roborourke
  committed
  ca1ec3c
- Advertise supported PKCE methods in the REST index
  roborourke
  committed
  f032204
- Add WP-CLI command to generate PKCE pairs
  roborourke
  committed
  078552b
- Document PKCE support
  roborourke
  committed
  f966cec
- Trigger CI checks
  
  roborourke
  and
  CommandCodeBot
  committed
  a94f613
- Fix CI failures after merging main
  roborourke
  committed
  0c481d6
- Fix PKCE error redirects silently landing on wp-admin instead of the client
  roborourke
  committed
  0257a45
- Advertise PKCE methods in the RFC 8414 metadata document
  
  roborourke
  and
  claude
  committed
  c827fba
- Apply review feedback on PKCE
  
  roborourke
  and
  claude
  committed
  0b19589
Commits on Sep 23, 2026
- Merge upstream main into roborourke/pkce-support
  
  roborourke
  and
  claude
  committed
  e52fa65
- Apply Copilot review feedback on PKCE error handling
  
  roborourke
  and
  claude
  committed
  40696fe
- Name the supported PKCE methods in the unsupported-method error
  
  roborourke
  and
  claude
  committed
  6cd4069
- Link PKCE tests to the RFC sections they cover, and fill gaps
  
  roborourke
  and
  claude
  committed
  3d64684
Commits on Oct 7, 2026
- Merge remote-tracking branch 'upstream/main' into roborourke/pkce-support
  roborourke
  committed
  7ea2796
- Map PKCE token errors through the RFC 6749 error format
  
  roborourke
  and
  claude
  committed
  384e2f1
- Expect a 400 when a burned PKCE code is reused
  
  roborourke
  and
  claude
  committed
  f46c09e

Commits

Commits on Sep 17, 2026

Commits on Sep 23, 2026

Commits on Oct 7, 2026