PKCE Default Flow

🔐 The PKCE flow will be replacing Authorization Code as the default flow. Projects that upgrade to this milestone release should test their applications thoroughly to make sure their OAuth flows behave as expected. Users can still upgrade to this release and use the .authorizationCode grant type, however they will need to explicitly specify that authorization flow in their applications:

let grantType: OAuth.GrantType = .authorizationCode(.secureRandom())
oauth.authorize(provider: provider, grantType: grantType)

📌 Discussion Thread:

• codefiesta/OAuthKit#62

OAWebView Constructor

The OAWebView constructor will be changed from OAWebView() to OAWebView(oauth: OAuth). This provides 2 benefits:

• Improved testability of the OAWebView and OAWebViewCoordinator.
• Explicitly setting the OAuth object inside the constructor leads to less potential bugs and developer confusion.

📌 Discussion Thread:

• codefiesta/OAuthKit#67