fix: reject PKCE code_verifier below RFC 7636 length floor - #28003

Open

BobbyHo wants to merge 8 commits into

mainfrom

oauth2-pkce-verifier-length

Commits on Aug 10, 2026

fix(coderd/oauth2provider): reject PKCE code_verifier below RFC 7636 length floor
BobbyHo
committed
7e3f6c0
fix(scripts/oauth2): generate PKCE verifiers at the RFC 7636 floor length
BobbyHo
committed
a125238
fix(coderd/oauth2provider): validate code_challenge format at authorize
BobbyHo
committed
eea4094
fix(coderd/oauth2provider): return invalid_request for malformed code_verifier
BobbyHo
committed
e7d78d5

Commits on Aug 11, 2026