Device Authorization has no PKCE Support
The methods
rp.DeviceAuthorizationrp.DeviceAuthorization and rp.DeviceAccessTokenrp.DeviceAccessToken don't support PKCE for OPs that require PKCE for device authorization. rp.DeviceAuthorizationrp.DeviceAuthorization does support a custom authFnauthFn, so you can pass a custom http.FormAuthorizationhttp.FormAuthorization function that adds the code_challengecode_challenge and code_challenge_methodcode_challenge_method. However, rp.DeviceAccessTokenrp.DeviceAccessToken doesn't support an auth function. We worked around this limitation by creating a custom http RoundTripper that adds code_verifiercode_verifier to the form data and then rewrites the request body before sending it. Should I open an issue for this?
