Zum Inhalt
HALOWERK

Technische Prüfungen & Formate

api / oauth pkce flow correspondence

An agent that reproduces an OAuth authorization-code exchange needs evidence that callback state code redirect binding or S256 challenge disagree.

POST https://detect.halowerk.com/v1/api/oauth-pkce-flow-correspondence

Eingaben

Felder des veröffentlichten Eingabeschemas
FeldTypPflichtBeschreibung
artifactobjectJa
Vollständiges Eingabeschema anzeigen
{
  "type": "object",
  "properties": {
    "artifact": {
      "type": "object",
      "properties": {
        "authorization": {
          "type": "object",
          "properties": {
            "state": {
              "type": "string",
              "maxLength": 16384
            },
            "code_challenge": {
              "type": "string",
              "maxLength": 43,
              "minLength": 43,
              "pattern": "^[A-Za-z0-9_-]{43}$"
            },
            "code_challenge_method": {
              "const": "S256"
            },
            "redirect_uri": {
              "type": "string",
              "maxLength": 16384
            }
          },
          "required": [
            "state",
            "code_challenge",
            "code_challenge_method",
            "redirect_uri"
          ],
          "additionalProperties": true
        },
        "callback": {
          "type": "object",
          "properties": {
            "state": {
              "type": "string",
              "maxLength": 16384
            },
            "code": {
              "type": "string",
              "maxLength": 16384
            },
            "redirect_uri": {
              "type": "string",
              "maxLength": 16384
            }
          },
          "required": [
            "state",
            "code",
            "redirect_uri"
          ],
          "additionalProperties": true
        },
        "token_request": {
          "type": "object",
          "properties": {
            "code": {
              "type": "string",
              "maxLength": 16384
            },
            "code_verifier": {
              "type": "string",
              "maxLength": 128,
              "minLength": 43,
              "pattern": "^[A-Za-z0-9._~-]{43,128}$"
            },
            "redirect_uri": {
              "type": "string",
              "maxLength": 16384
            }
          },
          "required": [
            "code",
            "code_verifier",
            "redirect_uri"
          ],
          "additionalProperties": true
        }
      },
      "required": [
        "authorization",
        "callback",
        "token_request"
      ],
      "additionalProperties": true,
      "$comment": "Global native parser:1MiB JSON, depth32,30000nodes,2048items per array,16384characters per string. Work-budget limits can yield unknown."
    }
  },
  "required": [
    "artifact"
  ],
  "additionalProperties": false
}

Originalschema öffnen

Veröffentlichtes Eingabebeispiel

{
  "artifact": {
    "authorization": {
      "state": "synthetic-state",
      "code_challenge": "ZtNPunH49FD35FWYhT5Tv8I7vRKQJ8uxMaL0_9eHjNA",
      "code_challenge_method": "S256",
      "redirect_uri": "https://example.invalid/callback"
    },
    "callback": {
      "state": "other-state",
      "code": "synthetic-code",
      "redirect_uri": "https://example.invalid/callback"
    },
    "token_request": {
      "code": "synthetic-code",
      "code_verifier": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "redirect_uri": "https://example.invalid/callback"
    }
  }
}

Ergebnis & Dokumentation

Maschinenlesbare Dokumentation dieses Hubs

Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.

Weitere Endpunkte dieses Hubs

Alle Endpunkte dieses Hubs →