chore: added warning against the usage of WKWebView for WebAuth

auth0 · Oct 10, 2024 · eeb0e40 · eeb0e40
1 parent b8de698
commit eeb0e40
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/App/ViewController.swift b/App/ViewController.swift
@@ -27,15 +27,13 @@ class ViewController: UIViewController {
     @IBAction func login(_ sender: Any) {
         Auth0
             .webAuth()
-            .provider(WebAuthentication.webViewProvider())
             .logging(enabled: true)
             .start(onAuth)
     }
 
     @IBAction func logout(_ sender: Any) {
         Auth0
             .webAuth()
-            .provider(WebAuthentication.webViewProvider())
             .logging(enabled: true)
             .clearSession(federated: false) { result in
                 switch result {

diff --git a/Auth0/WebViewProvider.swift b/Auth0/WebViewProvider.swift
@@ -11,6 +11,8 @@
 @preconcurrency import WebKit
 
 
+/// WARNING: The use of `webViewProvider` is not recommended and contravenes the guidelines of the OAuth Protocol, which advises against using `WKWebView` for WebAuth.
+/// The recommended approach is to utilize `ASWebAuthenticationSession`. Employ the provider below only if you fully understand the associated risks and are confident in your decision.
 public extension WebAuthentication {
     static func webViewProvider(style: UIModalPresentationStyle = .fullScreen) -> WebAuthProvider {
         return { url, callback  in