Module pkce 

PKCE Authorization Code flow for Cognito desktop login.

Flow:

1. Generate code_verifier + code_challenge (S256).
2. Bind a random local TCP port for the redirect_uri.
3. Open browser to Cognito hosted UI.
4. Await HTTP callback (code + state).
5. Exchange code for tokens via /oauth2/token.
6. Decode email from id_token claims (no re-verification needed — we fetched the token directly from Cognito).

Structs

PkceResult

Constants

LOGIN_TIMEOUT_SECS

Functions

extract_jwt_claims 🔒

open_browser 🔒

percent_decode 🔒

percent_encode 🔒

query_param 🔒

refresh_token

run_pkce_login