# Using OAuth with PKCE Authorization Flow (Proof Key for Code Exchange)

DevFeed: [Using OAuth with PKCE Authorization Flow (Proof Key for Code Exchange)](<https://devfeed.tech/articles/using-oauth-with-pkce-authorization-flow-proof-key-for-code-exchange-37600.md>)

Original publisher: [Read original article](<https://www.taniarascia.com/oauth-pkce-authorization/>)

Author: hello@taniarascia.com

Published: 2021-06-20T00:00:00Z

Content type: tutorial

Language: en

Sources: [Tania Rascia](<https://devfeed.tech/sources/tania-rascia.md>)

Topics: [OAuth 2.0](<https://devfeed.tech/topics/oauth2.md>), [pkce](<https://devfeed.tech/topics/pkce.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Web app](<https://devfeed.tech/topics/webapp.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [client](<https://devfeed.tech/tags/client.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [oauth-2-0](<https://devfeed.tech/tags/oauth-2-0.md>), [pkce](<https://devfeed.tech/tags/pkce.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [security](<https://devfeed.tech/tags/security.md>), [token](<https://devfeed.tech/tags/token.md>)

## AI overview

This tutorial explains OAuth 2.0 authorization flows, distinguishes authorization from authentication with OpenID Connect, and describes why client-side and mobile applications use PKCE when client secrets cannot be protected.

## Source excerpt

If you've ever created a login page or auth system, you might be familiar with OAuth 2.0, the industry standard protocol for authorization...