r-lib/httr

OAuth - AuthCode with PKCE (without secret)

m-mohr opened this issue · 2 comments

m-mohr commented

We are using the OAuth 2.0 functionality. It seems that httr is only supporting the AuthCode flow without PKCE (i.e. you need to provide a client secret). Is there a way to use AuthCode (or Device Code) with PKCE and thus without a client secret? If not, are there any plans to implement this?

jennybc commented

I think you should look at httr2:

https://httr2.r-lib.org

  • 👍1
m-mohr commented

Thanks, that will probably work!