All challenges
Multiple ChoiceHard 30s

PKCE in OAuth

Choose the best answer for: public client security
Options
  1. 1No security: the code verifier is exposed in plain sight
  2. 2Only for servers: PKCE applies to confidential clients
  3. 3PKCE prevents authorization code interception
  4. 4Deprecated: removed in favor of implicit flow for all

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle