Upcoming security changes to Google's OAuth 2.0 authorization endpoint in embedded webviews- Google Developers Blog

What this post added

This post details upcoming security changes to Google's OAuth 2.0 authorization endpoint when accessed via embedded webviews. It introduces new security measures to prevent authorization code interception attacks, including stricter validation of redirect URIs and the use of PKCE (Proof Key for Code Exchange) by default for new OAuth clients. The changes aim to enhance the security of the authorization flow and protect user credentials.