Class Pkce

A PKCE code verifier and its S256 code challenge (RFC 7636). The client sends the challenge when it starts a sign-in flow and presents the verifier when it finishes, so whatever the service returns in between (such as a one-time sign-in code) is useless to anyone who intercepts it.

Inheritance

object

Pkce

Namespace: Singulink.Net.Http.Api.Client

Assembly: Singulink.Net.Http.Api.Client.dll

Syntax

public sealed class Pkce

Remarks

Each instance has its own random verifier. The challenge reveals nothing about the verifier, which proves that the party that finishes a flow is the one that started it only as long as no one else knows it.

Properties

Name	Description
Challenge	Gets the code challenge: the SHA-256 hash of the verifier's ASCII characters, base64url encoded without padding (43 characters).
Verifier	Gets the code verifier: 32 random bytes, base64url encoded without padding (43 characters).

Methods

Name	Description
Create()	Creates a new random code verifier and its code challenge.