Glossary: Web App Security and Authentication

PKCE

Also written: Proof Key for Code Exchange

A verifier and challenge pair that makes a stolen authorization code useless, because swapping it for tokens needs the verifier only kc-shop holds.