@cheeaun 1. yes, /.well-known/oauth-authorization-server advertises it, if that's a 404, assume no support.2. yes, per the PKCE specification.Documentation coming soon