Enhancing OAuth Security for Mobile Applications with PKCE

OAuth 2.0 is the preferred mechanism for authorizing native mobile applications to their corresponding API endpoints. In order to be authorized, the native application attaches an OAuth access token to its API calls. Upon receiving a call, the API extracts the token, validates it (checks issuer, lifetime, associated authorizations, etc) and then determines whether the … Continue reading Enhancing OAuth Security for Mobile Applications with PKCE