Skip to content

Commit

Permalink
Fix typo in OAuth2_Cheat_Sheet.md (#1422)
Browse files Browse the repository at this point in the history
  • Loading branch information
jsphpl authored Jun 5, 2024
1 parent 0eef57b commit dcab125
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cheatsheets/OAuth2_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ This cheatsheet describes the best current security practices [1] for OAuth 2.0

## PKCE - Proof Key for Code Exchange Mechanism

OAuth 2.0 public clients utilizing the Authorization Code Grant are susceptible to the authorization code interception attack. Proof Key for Code Exchange (PCKE, pronounced "pixy") is the technique used to mitigate against the threat of authorization code interception attack.
OAuth 2.0 public clients utilizing the Authorization Code Grant are susceptible to the authorization code interception attack. Proof Key for Code Exchange (PKCE, pronounced "pixy") is the technique used to mitigate against the threat of authorization code interception attack.

Originally, PKCE is intended to be used solely focused on securing native apps, but then it became a deployed OAuth feature. It does not only protect against authorization code injection attacks but also protects authorization codes created for public clients as PKCE ensures that the attacker cannot redeem a stolen authorization code at the token endpoint of the authorization server without knowledge of the code_verifier.

Expand Down

0 comments on commit dcab125

Please sign in to comment.