You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+21-2Lines changed: 21 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,9 +18,11 @@ Status: **ok**
18
18
19
19
### Authorization code flow + PKCE
20
20
21
-
Status: **planned** see #4
21
+
Status: **ok**
22
+
23
+
Please be aware that some providers (OneDrive, Auth0) allow Code Flow + PKCE only for native apps. Web apps have to use implicit flow.
22
24
23
-
**Attention:**
25
+
### Important
24
26
For security reasons this plugin does not support the authorization code flow without PKCE.
25
27
26
28
That would include storing your **client secret** in client code which is highly insecure and not recommended.
@@ -96,6 +98,23 @@ export class SignupComponent {
96
98
97
99
See the `oauth2Options` interface at https://github.com/moberwasserlechner/capacitor-oauth2/blob/master/src/definitions.ts#L24
98
100
101
+
### Error Codes
102
+
103
+
* ERR_PARAM_NO_APP_ID ... The appId / clientId is missing. (web, android, ios)
104
+
* ERR_PARAM_NO_AUTHORIZATION_BASE_URL ... The authorization base url is missing. (web, android, ios)
105
+
* ERR_PARAM_NO_REDIRECT_URL ... The redirect url / custom scheme url is missing. (web, android, ios)
106
+
* ERR_PARAM_NO_ACCESS_TOKEN_ENDPOINT ... The access token endpoint url is missing. It is only needed if code flow is used. (web, android, ios)
107
+
* ERR_PARAM_INVALID_RESPONSE_TYPE ... You configured a invalid responseType. Only "token" or "code" are allowed. (web, android, ios)
108
+
* ERR_NO_ACCESS_TOKEN ... No access_token found. (web, android)
109
+
* ERR_NO_AUTHORIZATION_CODE ... No authorization code was returned in the redirect response. (web, android, ios)
110
+
* ERR_STATES_NOT_MATCH ... The state included in the authorization code request does not match the one in the redirect. Security risk! (web, android, ios)
111
+
* USER_CANCELLED ... The user cancelled the login flow. (android, ios)
112
+
* ERR_CUSTOM_HANDLER_LOGIN ... Login through custom handler class failed. See logs and check your code. (android, ios)
113
+
* ERR_CUSTOM_HANDLER_LOGOUT ... Logout through custom handler class failed. See logs and check your code. (android, ios)
114
+
* ERR_ANDROID_NO_BROWSER ... On Android not suitable browser could be found! (android)
115
+
* ERR_GENERAL ... A unspecific error. Check the logs to see want exactly happened. (web, android, ios)
116
+
117
+
99
118
## Platform: Web/PWA
100
119
101
120
This implementation just opens a browser window to let users enter their credentials.
0 commit comments