Function generateAuthorizationCode

generateAuthorizationCode(
__namedParameters: GenerateAuthorizationCodeParams,
config: GenerateAuthorizationCodeConfig,
): Promise<{ authorization_code: string }>
Issues an encrypted authorization code containing redirect and PKCE binding data.

Why (Security)
Binding redirect URI and PKCE data to code mitigates interception and substitution attacks.

Specifications
- RFC 6749 (OAuth 2.0 Authorization Framework) Section 4.1.2, authorization code issuance
- RFC 7636 (Proof Key for Code Exchange by OAuth Public Clients) Section 4.3, PKCE challenge parameters
- RFC 6749 (OAuth 2.0 Authorization Framework) Section 10.6, redirect URI protection
Parameters
- __namedParameters: GenerateAuthorizationCodeParams
- config: GenerateAuthorizationCodeConfig
Returns Promise<{ authorization_code: string }>
- Defined in packages/server-core/src/statements/tokens/generateAuthorizationCode.ts:28