Support for plain PKCE challenges

[Pelps12]

Would it be possible to add plain PKCE Code challenge generation? Some "legacy" APIs may not support it. I could create a pull request for it. (Would be my first PR though).

[panva]

But, ... it's plain, there's already a method for generating a verifier.

What else do you imagine needs to be done?

[Pelps12]

I'm sorry if I'm getting something wrong. The PKCEcodeChallenge function only creates a challenge with SHA-256 but I've seen some authorization server that still use the plain version

[panva]

Ok. But then there's nothing to be done. plain just means the challenge is the same as the verifier.

[Pelps12]

5 hours of my life wasted 😭. Sorry for wasting your time

[panva]

Sorry about that ;) please keep in mind plain PKCE doesn't have the same protections. It's truly legacy and not considered when it comes to the profiles this library declares support for.

[Pelps12]

I understand the risks associated (kinda). The services I need to use don't have the best OAuth implementations (cough cough MyAnimeList). SHA-256 doesn't even seem that hard to implement (may be wrong).