code_challenge

RU: code_challenge

The value sent to the authorization endpoint in a PKCE flow (RFC 7636): a Base64URL-encoded SHA-256 hash of the randomly generated code_verifier. Because it is derived one-way, an attacker who intercepts the authorization request cannot reconstruct the verifier needed to complete the token exchange.