OAuth 2.0 + PKCE: Why OAuth Alone is Not Enough to Secure Your API

If you're using OAuth 2.0 to secure your API — that's great. But if you're NOT using PKCE with it,...