title: What OAuth Frameworks are supporting PKCE (RFC 7636)?
body: <p>I am evaluating use of the authorization code workflow.  RFC 7636 uncovered a problem with public clients and suggested a solution. <a href="https://www.rfc-editor.org/info/rfc7636" rel="nofollow">RFC 7636</a> was published only in September, 2015.   </p>
  
  <p>Which OAuth2 frameworks have implemented the recommendations of that RFC (namely the "Proof Key for Code Exchange")?   Specifically, which of the following have a version which implements the PKCE?</p>
  
  <ul>
  <li>Spring </li>
  <li>Microsoft .NET</li>
  </ul>