Function generateCodeChallenge

internal/auth/codex/pkce.go:53–56

generateCodeChallenge creates a code challenge from a given code verifier. The challenge is derived by taking the SHA256 hash of the verifier and then Base64 URL-encoding the result. This is sent in the initial authorization request and later verified against the verifier.

(codeVerifier string)

// Base64 URL-encoding the result. This is sent in the initial authorization
// request and later verified against the verifier.
func generateCodeChallenge(codeVerifier string) string {
	hash := sha256.Sum256([]byte(codeVerifier))
	return base64.URLEncoding.WithPadding(base64.NoPadding).EncodeToString(hash[:])
}