An empty PKCE pair is no PKCE, so Google Home can link without it

Shipped: October 28, 2026 at 7:54 AM UTC
Author: Kamo
Commit: 201d68a

kamo-login forwards parameters the client did not send as empty strings; the authorize check took "" as a challenge and told Google (require_pkce off, sends no PKCE) that S256 was required.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing