import org.springframework.security.oauth2.client.registration.ClientRegistration; /** * Prints whether a Spring OAuth2 client registration requires PKCE out of the box. * Run against spring-security-oauth2-client 6.5.1 and 7.1.1, it shows the default flipping * in the same release that flipped it on the authorization server. */ public class ClientPkceDefault { public static void main(String[] args) { ClientRegistration.ClientSettings cs = ClientRegistration.ClientSettings.builder().build(); System.out.println("ClientRegistration.ClientSettings.requireProofKey = " + cs.isRequireProofKey()); } }