The client auth implementation for clients should check that the auth server implements PKCE, as described in https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/specification/draft/basic/authorization.mdx?plain=1#L350-L356.
Activity
RyoKusnadi commentedon Oct 1, 2025
Hi @jba, allow me to double confirming
let me know if i missed something.
if already no issue, can assign this task to me? willing to raise the PR
jba commentedon Oct 6, 2025
Yes, CodeChallengeMethodsSupported must be a non-empty slice.
Add Check PCKE Support (#563)
maciej-kisiel commentedon Feb 3, 2026
This looks done (PR was merged).