← All SPoG micro-apps

OAuth 2.0 PKCE Code Verifier & Challenge Auditor

Audits OAuth 2.0 PKCE (Proof Key for Code Exchange) code_verifier and code_challenge parameters.

Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.

How it works

Standard: RFC 7636 PKCE for OAuth Public Clients

Formula: Verify code_verifier length (43-128 chars) and S256 challenge mapping

Checks: String length between 43 and 128 characters

Calculated locally in browser memory; nothing leaves your browser.

Deterministic local-first client-side execution. Provided as-is without warranty.