OAuth and OpenID Connect: Do PKCE and Nonce Provide the Same Protection?
danielfett.de