supabase / supabase-flutter / 28177869575

85%

Build Type

push

github

Committed by web-flow

Commit Message

fix(gotrue): include code challenge in resend with PKCE flow (#1469)

## What

When `resend()` is called with an `email` while the client uses the PKCE
flow (the default), the `POST /resend` request now includes
`code_challenge` and `code_challenge_method`. Without the code
challenge, the resent confirmation link cannot be completed via
`exchangeCodeForSession`.

This brings the Dart SDK to parity with the supabase-js behavior.

## Behavior

- `resend(email:)` in PKCE flow includes `code_challenge` +
`code_challenge_method: s256` in the body.
- Phone resend is unchanged (no code challenge).
- Implicit (non-PKCE) flow is unchanged (fields are null).

## Tests

Added tests covering all three cases above in `otp_mock_test.dart`, and
captured the resend body in the OTP mock client for assertions.

Closes SDK-1023


https://linear.app/supabase/issue/SDK-1023/parityauth-resend-with-pkce-flow-should-include-code-challenge-in

Coverage Stats

4 of 4 new or added lines in 1 file covered. (100.0%)

77 existing lines in 1 file now uncovered.

4090 of 4791 relevant lines covered (85.37%)

3.64 hits per line