I wish to get an access token for my API from inside my Android app. The documentation here - https://auth0.com/docs/api-auth/tutorials/authorization-code-grant-pkce gives the steps and code to obtain an access token. I tried these steps by manually executing the java code to create a challenge and verifier, and I got the JWT.
I have tried using the setup from these steps - https://auth0.com/docs/libraries/lock-android in my Android app, it authenticates, but the access token isn’t a JWT.
So do I have to implement the steps in the first link of PKCE documentation manually? Doesn’t Lock library take care of some things like opening browser, generating the correct URL and redirecting back to app etc?