Random keys (OAuth2 state, PKCE code_verifier, OIDC nonce) in base64url without padding, so they can go into a URL as they are (RFC 7636 ยง4.1 allows only unreserved characters).
state
code_verifier
nonce
Protected
Readonly
Optional
Random keys (OAuth2
state, PKCEcode_verifier, OIDCnonce) in base64url without padding, so they can go into a URL as they are (RFC 7636 ยง4.1 allows only unreserved characters).