keycloak.pkce_utils
===================

.. py:module:: keycloak.pkce_utils

.. autoapi-nested-parse::

   PKCE utility functions for code verifier and code challenge generation.



Functions
---------

.. autoapisummary::

   keycloak.pkce_utils.generate_code_verifier
   keycloak.pkce_utils.generate_code_challenge


Module Contents
---------------

.. py:function:: generate_code_verifier(length: int = 128) -> str

   Generate a high-entropy cryptographic random string for PKCE code_verifier.

   RFC 7636 recommends a length between 43 and 128 characters.


.. py:function:: generate_code_challenge(code_verifier: str, method: str = 'S256') -> tuple[str, str]

   Generate a code_challenge from the code_verifier using the specified method.

   Supported methods: "S256" (default), "plain".
   Returns (code_challenge, code_challenge_method).