Oh, sorry my reply only went to Janusz. But while letting all you others also see my answer I’d like to add that I’d like to rewrite the OIDC frontend to SATOSA. It’s now base on pyOP which not readily extensible. I’d rather use the pyoidc next generation now being worked on (you can find it as oicmsg, oiccli and oicrp on https://github.com/identitypython). If we where to switch to nextgen, adding support for PKCE to SATOSA would just be configuration. There are still some work needed on nextgen, so no change in the near future. _______________________________________________ satosa-users mailing list satosa-users at lists.sunet.se https://lists.sunet.se/listinfo/satosa-users