diff --git a/docs/protocols/authorization-code-grant-with-pkce.md b/docs/protocols/authorization-code-grant-with-pkce.md
index a1752c612..b52dabec5 100644
--- a/docs/protocols/authorization-code-grant-with-pkce.md
+++ b/docs/protocols/authorization-code-grant-with-pkce.md
@@ -13,7 +13,7 @@ sequenceDiagram
   User->>App: Click sign-in link (1)
 
   activate App
-  Note left of App: Generate code_verifier and<br/>code_challenge
+  Note right of App: Generate code_verifier and<br/>code_challenge
   App->>Identity Provider: Authorization code request & code_challenge (2)
   deactivate App
 
diff --git a/docs/protocols/silent-refresh-token-in-iframe-flow.md b/docs/protocols/silent-refresh-token-in-iframe-flow.md
index c44effdb1..9a35ef817 100644
--- a/docs/protocols/silent-refresh-token-in-iframe-flow.md
+++ b/docs/protocols/silent-refresh-token-in-iframe-flow.md
@@ -17,7 +17,7 @@ sequenceDiagram
   App->>Hidden iframe: Load silent<br/>Authorization Code Grant<br/>in an iframe (1)
 
   activate Hidden iframe
-  Note left of Hidden iframe: PKCE: Generate code_verifier and<br/>code_challenge
+  Note right of Hidden iframe: PKCE: Generate code_verifier and<br/>code_challenge
   Hidden iframe->>Identity Provider: Authorization code request (1)
   deactivate Hidden iframe
   Note right of Hidden iframe: PKCE: with code_challenge