[GH-ISSUE #556] Need method to generate random code verifier and code challenge #369

New issue

Closed

opened 2026-03-03 16:48:07 +03:00 by kerem · 3 comments

kerem commented

2026-03-03 16:48:07 +03:00

Owner

Originally created by @dingtianran on GitHub (Nov 6, 2019).
Original GitHub issue: https://github.com/OAuthSwift/OAuthSwift/issues/556

Need some helper methods to generate random code verifier and code challenge. In order to adapt pace protocol, currently I'm using two class methods from https://github.com/openid/AppAuth-iOS to generate them. I think it'll be very handy to have them in OAuthSwift as well.

like:
+ (nullable NSString *)generateCodeVerifier;
+ (nullable NSString *)codeChallengeS256ForVerifier:(nullable NSString *)codeVerifier;

Originally created by @dingtianran on GitHub (Nov 6, 2019). Original GitHub issue: https://github.com/OAuthSwift/OAuthSwift/issues/556 Need some helper methods to generate random code verifier and code challenge. In order to adapt pace protocol, currently I'm using two class methods from https://github.com/openid/AppAuth-iOS to generate them. I think it'll be very handy to have them in `OAuthSwift` as well. like: `+ (nullable NSString *)generateCodeVerifier;` `+ (nullable NSString *)codeChallengeS256ForVerifier:(nullable NSString *)codeVerifier;`

kerem

2026-03-03 16:48:07 +03:00

closed this issue
added the
feature-request
label

kerem commented

2026-03-03 16:48:08 +03:00

Author

Owner

@phimage commented on GitHub (Nov 6, 2019):

@dingtianran
you use it to connect to?
there is an openID layer upon oauth2?

@phimage commented on GitHub (Nov 6, 2019): @dingtianran you use it to connect to? there is an openID layer upon oauth2?

kerem commented

2026-03-03 16:48:08 +03:00

Author

Owner

@phimage commented on GitHub (Nov 16, 2019):

I see that seconde function depend on sha256 https://github.com/OAuthSwift/OAuthSwift/issues/540

https://tools.ietf.org/html/rfc7636#section-4.2
code_challenge = BASE64URL-ENCODE(SHA256(ASCII(code_verifier)))

@phimage commented on GitHub (Nov 16, 2019): I see that seconde function depend on sha256 https://github.com/OAuthSwift/OAuthSwift/issues/540 https://tools.ietf.org/html/rfc7636#section-4.2 code_challenge = BASE64URL-ENCODE(SHA256(ASCII(code_verifier)))

kerem commented

2026-03-03 16:48:08 +03:00

Author

Owner

@MrWoWander commented on GitHub (Mar 2, 2021):

I wrote and sent to the PR #647 generator random code verifier and code challenge

@MrWoWander commented on GitHub (Mar 2, 2021): I wrote and sent to the PR #647 generator random code verifier and code challenge

kerem referenced this issue

2026-03-03 16:49:42 +03:00

[PR #369] [MERGED] Fix a crash when encoding credentials in a test target #611