Not necessarily concerned about security.
I addressed the feedback here, keeping the original contributor鈥檚 history for credit: feat: PKCE support by balazsorban44 路 Pull Request #86 路 discourse/discourse-openid-connect 路 GitHub
Happy to finish the swing on it 