Property RequireCodeChallenge

Gets or sets a value indicating whether every sign-in must be bound to a PKCE code challenge when it begins (see BeginSignInAsync(string?, string?, CancellationToken)). Default is true.

Declaration
public bool RequireCodeChallenge { get; set; }
Property Value
Type Description
bool

A credential that passes through another app, such as the passkey hand-off page returning it to a native app's callback address, could be intercepted on its way. A sign-in bound to the code challenge of the app that began it cannot be finished with an intercepted credential (see RedirectSchemes for what it does not prevent). When this is false, sign-ins can begin without a challenge.