[PKCE] Enable For Code Grant

[robotarmy]

Work in Progress:

Goal : config can enable pkce for response_type:code.

TODO:
update schema.
persist code_challenge_method , code_challenge.
process code_verifier before token generation.

[robotarmy]

@danschultzer Hi!

If you have any thoughts about the direction of this code - let me know!

Also - what version of elixir are you developing with. I have been using erlang 22.0 and elixir 1.9.1.

It would be possible to run elixir-format however I know it will modify the whitespace that has been manually injected in certain areas - Is it tolerable for you to accept elixir-format based auto-format?

Best,

Curtis

[lucacorti]

Hey, any plan on finishing/merging this? PKCE support would be great.

[chvanikoff]

@danschultzer please give the PR a look
According to the oAuth 2 Security BCP, PKCE is a requirement, not just recommendation

[danschultzer]

According to the oAuth 2 Security BCP, PKCE is a requirement, not just recommendation

Good to know! I'll review this again, and get PKCE support in ASAP.

[deepankar-j]

@danschultzer, is there any update on this PR? Thanks!

[ericdude4]

@danschultzer any updates here?

[follmann]

@danschultzer I'd be great to have PKCE support, cheers!

[Ross65536]

If anyone is interested I have my own PKCE implementation on my fork while my PR gets reviewed.

EDIT: I'm no longer maintaining my fork