This article further highlights the importance of using PKCE for confidential clients and describes a possible attack scenario