Discord supports PKCE and requires it in mobile development

[ScreamZ]

Using ARCTIC V2 I'm trying to use Discord provider in a React Native application using expo auth sessions.

Using PKCE mode I can redirect to native scheme URI myapp:// without PKCE it's not possible.

Could we implement PKCE in validation URL ?

[randreu28]

Arctic provides utilites for web-based flows. When using apps, the auth flow usually goes with build id's of your app. Meaning, it is the app itself, not your backend, who gets an oauth2.0 JWT for the provider.

For example, with Google sign in, you would register the name of the app build, as well as the signing certificate of that build