「应用安全」OAuth和OpenID Connect的全面比较(46)_1.简介在这篇文章中

// This should not happen but just in case.

if (method == null)

{

// Use 'plain' as the default value required by RFC 7636.

method = CodeChallengeMethod.PLAIN;

switch (method)

{

case PLAIN:

// code_verifier

return verifier;

case S256:

// BASE64URL-ENCODE(SHA256(ASCII(code_verifier)))

return computeChallengeS256(verifier);

default:

// The value of code_challenge_method extracted

「应用安全」OAuth和OpenID Connect的全面比较(46)