Identification, Authentication and Authorization

Applied Cryptography Robust Software Quantum Safety Machine Learning Applied to Security Analysis and Exploration of Vulnerabilities Computer Systems Forensic Analysis Reverse Engineering Identification, Authentication and Authorization Secure Execution Environments Direito da Organização e da Segurança

Identification, Authentication and Authorization
Access Control Models
OAuth 2.0 Authorization Framework
Linux Security Mechanisms
Authentication Protocols
PAM (Pluggable Authentication Modules)
FIDO and FIDO2 framework
Authentication with Trusted Third Parties / KDCs
Identity Management
Anonymity and Privacy

Powered by GitBook

On this page

Proof Key for Code Exchange (PKCE, RFC 7636)

PreviousClient credentials flow NextDevice authorization grant (RFC 8628)

Last updated 7 months ago

Binds authorization grants to their requesters.

Using a Code Challenge.
- A digest of a Code Verifier.
- A bit of commitment.
Cannot the used by eavesdroppers.

The requester is required to demonstrate the ownership of the authorization grant when fetching the access token.

Providing the Code Verifier.