oauth 2.0

OAuth 2.0: The importance of PKCE for confidential clients

This article further highlights the importance of using PKCE for confidential clients and describes a possible attack scenario

OAuth 2.0 and OpenID Connect Explained (in Plain English)