I’ve already implemented getting Authorization Code using PKCE in iOS app, but it requires app to redirect the user to browser and login via Auth0 login form. Just wonder if it’s possible to get Authorization Code using PKCE via some custom login form?
Currently, Authorization Code using PKCE needs a redirect to the browser. You can, however, configure the login form displayed in the browser by using the [Hosted Login Page] (Auth0 Universal Login).
By using this browser based authentication we are following the recommendations of the Internet Engineering Task Force (IETF), who has recently release a [Best Current Practices (BCP) when using OAuth 2.0 with native mobile applications] (https://www.rfc-editor.org/rfc/rfc8252.txt) where it states that OAuth 2.0 authorization requests from native apps should only be made through external user-agents, primarily the user's browser..
You can read more about this recommendation here: