OAuth configuration update - include PKCE support flags

Mark Goetz 1 Reputation point
2021-04-19T14:25:36.03+00:00

Hello,

I'm working on a project that involves OAuth integration with several different providers, including Microsoft. Some of the providers that I need to integrate with support the PKCE flow, and others do not. I am trying to use the standard OAuth configuration file at https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration to determine which providers support PKCE. However, Microsoft's configuration file does not include the correct data to indicate that it supports PKCE.

Could this file: https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration be updated to include the following?

"code_challenge_methods_supported": [
"plain",
"S256"
],

Thank you!

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,714 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,662 questions
{count} votes