fix: removed the validation of incoming redirect_uri once the webauth flow resumes back - Githubissues

auth0 / Auth0.swift

Auth0 SDK for Apple platforms

https://auth0.github.io/Auth0.swift

MIT License

345 stars 225 forks source link

fix: removed the validation of incoming redirect_uri once the webauth flow resumes back #850

Closed desusai7 closed 5 months ago

desusai7 commented 5 months ago

[ ] All new/changed/fixed functionality is covered by tests (or N/A)
[ ] I have added documentation for all new/changed functionality (or N/A)

📋 Changes

Removed the validation of incoming redirect_uri once the webauth flow resumes back because:
- Validation of incoming redirect_uri is no longer needed when the WebAuth is performed via PKCE flow and WebAuth is performed via PKCE in all possible scenarios within Auth0.swift
- Additionally, successful redirection of execution back to the app once the transaction is resumed is also a justifier that the redirect_uri is valid.

📎 References

auth0/Auth0.swift/pull/838

🎯 Testing