https://kenkitts.com/tags/security/Recent content in Security on Ken KittsHugoenMon, 03 Aug 2026 00:00:00 +0000https://kenkitts.com/posts/claude-code-okta-pkce-helper/Mon, 03 Aug 2026 00:00:00 +0000https://kenkitts.com/posts/claude-code-okta-pkce-helper/Claude Code's apiKeyHelper contract is one line: print a token to stdout. The easy way is a static key sitting in plaintext forever. Here's the harder way — Okta, PKCE, and a script that logs in so you don't have to leave a credential lying around.