diff --git a/lib/galaxy/authnz/custos_authnz.py b/lib/galaxy/authnz/custos_authnz.py
index 30f60a778e1..5ba223cb721 100644
--- a/lib/galaxy/authnz/custos_authnz.py
+++ b/lib/galaxy/authnz/custos_authnz.py
@@ -28,7 +28,7 @@ from ..authnz import IdentityProvider
 try:
     import pkce
 except ImportError:
-    pkce = None
+    pkce = None  # type: ignore[assignment]
 
 log = logging.getLogger(__name__)
 STATE_COOKIE_NAME = "galaxy-oidc-state"
diff --git a/lib/galaxy/dependencies/dev-requirements.txt b/lib/galaxy/dependencies/dev-requirements.txt
index 12d7ab2b23e..a11a11e73ad 100644
--- a/lib/galaxy/dependencies/dev-requirements.txt
+++ b/lib/galaxy/dependencies/dev-requirements.txt
@@ -64,6 +64,7 @@ outcome==1.2.0 ; python_version >= "3.7" and python_version < "3.11"
 packaging==21.3 ; python_version >= "3.7" and python_version < "3.11"
 pathspec==0.10.2 ; python_version >= "3.7" and python_version < "3.11"
 pillow==9.3.0 ; python_version >= "3.7" and python_version < "3.11"
+pkce==1.0.3 ; python_version >= "3.7" and python_version < "3.11"
 platformdirs==2.5.4 ; python_version >= "3.7" and python_version < "3.11"
 pluggy==1.0.0 ; python_version >= "3.7" and python_version < "3.11"
 port-for==0.6.2 ; python_version >= "3.7" and python_version < "3.11"
diff --git a/packages/app/test-requirements.txt b/packages/app/test-requirements.txt
index f93c7d6a95a..7075b49702b 100644
--- a/packages/app/test-requirements.txt
+++ b/packages/app/test-requirements.txt
@@ -1,4 +1,5 @@
 mock-ssh-server
+pkce
 pykwalify
 pytest
 testfixtures
diff --git a/pyproject.toml b/pyproject.toml
index 7e7d1542c28..a208e858e7b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -121,6 +121,7 @@ httpx = "*"
 isort = "^5.10.1"
 lxml = "!=4.2.2"
 markdown-it-reporter = "*"
+pkce = "*"
 PyGithub = "*"
 pytest = "*"
 pytest-asyncio = "*"