AI engineering glossary · Web APIs HTTP
What is PKCE?
PKCE: Proof Key for Code Exchange is an extension to the OAuth authorization code flow in which the client creates a random secret, sends a hash of it at the start and reveals the original when exchanging the code. It prevents a stolen code from being used, which suits mobile and single-page apps.
PKCE: an example
A mobile app generates a code_verifier, sends its SHA-256 as code_challenge and later proves it holds the verifier.
Related terms
More Web APIs HTTP terms
Where you learn it
PKCE is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.