diff --git a/charts/premium/authelia/Chart.yaml b/charts/premium/authelia/Chart.yaml
index 0f209974885..7671a539eb3 100644
--- a/charts/premium/authelia/Chart.yaml
+++ b/charts/premium/authelia/Chart.yaml
@@ -51,4 +51,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/premium/authelia
   - https://ghcr.io/authelia/authelia
 type: application
-version: 23.11.10
+version: 23.12.0
diff --git a/charts/premium/authelia/questions.yaml b/charts/premium/authelia/questions.yaml
index ab50fb0097a..e5276beb285 100644
--- a/charts/premium/authelia/questions.yaml
+++ b/charts/premium/authelia/questions.yaml
@@ -1142,6 +1142,25 @@ questions:
                                           type: string
                                           default: "form_post"
                                           required: true
+                                - variable: require_pkce
+                                  label: "Require PKCE"
+                                  description: "This configuration option enforces the use of PKCE for this registered client."
+                                  schema:
+                                    type: boolean
+                                    default: false
+                                    show_subquestions_if: true
+                                    subquestions:
+                                      - variable: pkce_challange_method
+                                        label: "PKCE Challange Method"
+                                        description: "This setting enforces the use of the specified PKCE challenge method for this individual client."
+                                        schema:
+                                          type: string
+                                          default: S256
+                                          enum:
+                                            - value: "plain"
+                                              description: "plain"
+                                            - value: "S256"
+                                              description: "S256"
 # Include{addons}
 # Include{codeserver}
 # Include{vpn}
diff --git a/charts/premium/authelia/templates/_configmap.tpl b/charts/premium/authelia/templates/_configmap.tpl
index c2797c8aaaa..c1bdd5de1c9 100644
--- a/charts/premium/authelia/templates/_configmap.tpl
+++ b/charts/premium/authelia/templates/_configmap.tpl
@@ -280,6 +280,12 @@ data:
           {{- end }}
           {{- end }}
           userinfo_signing_algorithm: {{ $client.userinfo_signing_algorithm | default "none" }}
+          {{- if $client.require_pkce }}
+          require_pkce: {{ $client.require_pkce }}
+          {{- end }}
+          {{- if $client.pkce_challange_method }}
+          pkce_challenge_method: {{ $client.require_pkce.pkce_challange_method | default "S256" }}
+          {{- end }}
     {{- end }}
     {{- end }}
     {{- end }}
diff --git a/charts/premium/authelia/values.yaml b/charts/premium/authelia/values.yaml
index 9f1cb548b90..c9b82260e9f 100644
--- a/charts/premium/authelia/values.yaml
+++ b/charts/premium/authelia/values.yaml
@@ -573,6 +573,12 @@ identity_providers:
 ## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256.
 # userinfo_signing_algorithm: none
 
+## This configuration option enforces the use of PKCE for this registered client.
+# require_pkce: false
+
+## This setting enforces the use of the specified PKCE challenge method for this individual client.
+# pkce_challange_method: S256
+
 portal:
   open:
     enabled: true