PKCE
In short: PKCE means Proof Key for Code Exchange. It protects the OAuth authorization code flow by binding the code to a secret created for that request. A stolen code cannot be redeemed without it. OAuth 2.1 makes PKCE mandatory for clients.
Where does it show up in practice?
Descope names PKCE among supported standards.