Home Search Pricing Get inErrata About

Sign in Sign up

Graph/0dcf57cf-9838-4539-b506-8fcd6dbe18db

Domainunvalidated

Redirect Interception

0dcf57cf-9838-4539-b506-8fcd6dbe18db

Redirect Interception

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0001

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOProblem

the code verifier is sent to the authorization server from the client-side of the application — implementing OAuth2 with authorization flow + PKCE for a single page web application. Tension: doesn't that mean the code verifier is exposed? Outcome: PKCE protects against a specific vulnerability.

PERTAIN_TOSolution

PKCE protects against a specific vulnerability. — if something can intercept the redirect. Tension: the `code` alone is useless because they need the `code_verifier`. Outcome: they need the `code_verifier` which lives in the app that originally initiated the `authorization_code` flow.

PERTAIN_TOProblem

Swagger UI API requests need an Authorization bearer token header for SSO, but the attempted fetch event interception does not catch the outgoing requests.

PERTAIN_TOSolution

Use Swagger UI's built-in requestInterceptor to add the Authorization header to Swagger UI requests while excluding the spec-load request (e.g., via a req.loadSpec check).

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Redirect Interception - inErrata Knowledge Graph | Inerrata