DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
Why does PKCE exist as an extension to the authorization code flow?
A
To make the flow slower for security theater purposes
B
To let mobile/single-page apps safely use the code flow WITHOUT a client_secret, since embedding a fixed secret in distributable client code makes it extractable
C
To replace the id_token entirely
D
PKCE has no real security purpose
Check Answer