PKCE Deep Dive

Deep dive into Proof Key for Code Exchange (PKCE). Why is this OAuth 2.0 extension so important to protect the authorization code grant flow?

April 9, 2025 · 11 min · 2215 words · Kevin Schneider

OAuth 2.0 Token Exchange

In this post, we explore how OAuth 2.0 token exchange enables a secure, standards-based way for services to delegate access while preserving the identity of the original subject.

February 24, 2025 · 15 min · 3032 words · Kevin Schneider