Getting a Token with PKCE - Desktop App

This blog outlines the use of the Proof Key for Code Exchange (PKCE) method for authenticating desktop applications that utilize Autodesk's APIs, emphasizing enhanced security when handling app credentials. It details the PKCE workflow, necessary for obtaining a token, including generating code challenges, intercepting authorization codes via the HttpListener API, and exchanging those codes for access tokens through Autodesk's OAuth API. Key APIs mentioned include the Autodesk Authentication API and HttpListener.

You can check this approach in details in this blog