Cannot enable Authorization Code with PKCE flow on custom OAuth2 connection

[jorritvdven-por]

Hi!

I found this blog post on how to enable the PKCE flow for a custom OAuth2 connection:

Authorization Code with PKCE via connection

Problem Statement We want to use the Authorization Code with PKCE flow with an external (upstream) IdP. We are trying to use an Enterprise OIDC connection or Custom OAuth2 connection, but Auth0 is not using the PKCE flow. Solution You can create a custom OAuth2 connection, and use the Management API, patch into the options object: "pkce_enabled": true

However, when I try to enable it using the following request:

curl -H "Authorization: Bearer XXXXX" -X PATCH  -H "Content-Type: application/json" -d '{"options":{"pkce_enabled":true}}' https://<MY TENANT>.auth0.com/api/v2/connections/<CONNECTION ID>

I receive the following error:

{
  "statusCode": 400,
  "error": "Bad Request",
  "message": "Payload validation error: 'Missing required property: scripts' on property options.",
  "errorCode": "invalid_body"
}

Both the pkce_enabled and scripts properties do not seem to be documented so I’m completely in the dark here. Why should I add the scripts property to my PATCH request and what should it contain?

Thanks in advance!