product · inferred from evidence
PKCE
Proof Key for Code Exchange, an OAuth 2.0 extension for public clients.
- dropbox-sdk-js 9.x PKCE flow rejects `code_verifier` in web apps
Yes, the PKCE flow was broken in dropbox-sdk-js 9.x — the token exchange rejected the `code_verifier` even though the same code worked on 8.x, and multiple users hit it at the same time. Downgrading to 8.x was the confirmed workaround while