OAuth and OpenID Connect: Do PKCE and Nonce Provide the Same Protection? | Dark Hacker News