ReadonlycodeRFC 7636 §4.2, S256 method: BASE64URL(SHA256(ASCII(code_verifier))).
ReadonlycodeReadonlycodeRFC 7636 §4.1: 43-128 char high-entropy random string. Never send this to the authorization endpoint — only the derived challenge goes in the authorization URL; the verifier is redeemed later, at the token endpoint.
A freshly derived PKCE pair, ready to drive one authorization attempt.