Skip to content

Definition

What is PKCE (Proof Key for Code Exchange)?

Proof Key for Code Exchange

PKCE checks that the connection collecting a sign-in token is the one that started the approval process.

In a Bangladeshi restaurant

During a restaurant connection, the assistant supplies proof that Rosuii checks before exchanging the approval code for a token.

Common mistake

PKCE does not decide which restaurant records a staff member may read; account permissions still matter.

Where it lives in Rosuii

Rosuii requires this check in its OAuth connection flow without asking the owner to copy the proof values.

See the feature in detail
Browse the full glossary