Skip to content

Conversation

@kapschy
Copy link

@kapschy kapschy commented Aug 19, 2025

Currently the pkce_code_challenge_methods_supported are hardcoded to ["plain", "S256"]. This could cause a mismatch between the configured challenge methods in the base Doorkeeper configuration and those that are advertised at the /.well-known/openid-configuration endpoint.

Updates the method to delegate to doorkeeper#pkce_code_challenge_methods so that the supported methods exposed via the DiscoveryController will match the methods that have been configured by the main Doorkeeper configuration.

Previously the `code_challenge_methods` were hardcoded to `plain` and
`S256`. This will cause a mismatch between the configured challenge
methods and those that were advertised.

Update to delegate to `doorkeeper#pkce_code_challenge_methods` so that
the supported methods exposed via the DiscoveryController will match the
methods that have been configured by the main Doorkeeper configuration.
@nbulaj
Copy link
Member

nbulaj commented Feb 12, 2026

Hello @kapschy . Thanks for your contribution and patience, sorry for long responses 🙏 This looks good to me, can you please rebase with the latest changes? Thanks a lot 🙇

Copy link
Member

@nbulaj nbulaj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants