@mcp-z/oauth
    Preparing search index...

    Function generatePKCE

    • Generate PKCE code verifier and challenge pair

      Uses SHA-256 hashing (S256 method) as recommended by RFC 7636. Code verifier is 32 random bytes base64url-encoded (43 characters).

      Returns PKCEPair

      PKCE pair with verifier and challenge

      const { verifier, challenge } = generatePKCE();

      // Use challenge in authorization URL
      authUrl.searchParams.set('code_challenge', challenge);
      authUrl.searchParams.set('code_challenge_method', 'S256');

      // Later, use verifier in token exchange
      tokenParams.code_verifier = verifier;