Add PKCE support (RFC 7636) - #85

Open

roborourke wants to merge 18 commits into

WP-API:mainfrom

humanmade:roborourke/pkce-support

Commits on Sep 17, 2026

Add PKCE helper class
roborourke
committed
303e2c4
Bind PKCE challenge to authorization codes
roborourke
committed
f5249aa
Add per-client PKCE requirement
roborourke
committed
beb6992
Validate PKCE parameters at the authorisation endpoint
roborourke
committed
bf81aa4
Verify code_verifier at the token endpoint
roborourke
committed
fdb4c39
Add PKCE settings to the client admin screen
roborourke
committed
ca1ec3c
Advertise supported PKCE methods in the REST index
roborourke
committed
f032204
Add WP-CLI command to generate PKCE pairs
roborourke
committed
078552b
Document PKCE support
roborourke
committed
f966cec
Trigger CI checks

roborourke
and
CommandCodeBot
committed
a94f613
Fix CI failures after merging main
roborourke
committed
0c481d6
Fix PKCE error redirects silently landing on wp-admin instead of the client
roborourke
committed
0257a45
Advertise PKCE methods in the RFC 8414 metadata document

roborourke
and
claude
committed
c827fba
Apply review feedback on PKCE

roborourke
and
claude
committed
0b19589

Commits on Sep 23, 2026