OIDC: add note on PKCE support for code flow (#13206)

* OIDC: add note on PKCE support for code flow

* add changelog

* remove changelong
This commit is contained in:
John-Michael Faircloth 2021-11-18 13:46:34 -06:00 committed by GitHub
parent 77601ceddf
commit 1804ac1efd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -117,7 +117,8 @@ JSON Pointer can be used as a selector. Refer to the
This section covers the setup and use of OIDC roles. If a JWT is to be provided directly,
refer to the [JWT Authentication](/docs/auth/jwt#jwt-authentication) section below. Basic
familiarity with [OIDC concepts](https://developer.okta.com/blog/2017/07/25/oidc-primer-part-1)
is assumed.
is assumed. The Authorization Code flow makes use of the Proof Key for Code
Exchange (PKCE) extension.
Vault includes two built-in OIDC login flows: the Vault UI, and the CLI
using a `vault login`.