You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
// Store the PKCE code after the `getAuthorizationUrl()` call.
$_SESSION['oauth2pkceCode'] = $provider->getPkceCode();
// ...
// Restore the PKCE code before the `getAccessToken()` call.
$provider->setPkceCode($_SESSION['oauth2pkceCode']);
What about unsettling the $_SESSION['oauth2pkceCode'] after setPkceCode() is done?
unset($_SESSION['oauth2pkceCode']);
There's no reason to keep it around, is there?
The text was updated successfully, but these errors were encountered:
hkirsman
changed the title
PKCE: Unset from oauth2pkceCode session after login?
PKCE: Unset oauth2pkceCode from session after login?
Feb 16, 2023
There's this example in dev release for PKCE
What about unsettling the $_SESSION['oauth2pkceCode'] after setPkceCode() is done?
unset($_SESSION['oauth2pkceCode']);
There's no reason to keep it around, is there?
The text was updated successfully, but these errors were encountered: