Allow Authorization Code flow without a client_secret - Initial commit with Patch & testcases

[bull500]

Hello @n2ygk
Here's the PR

Fixes #1092

Description of the Change

Patch to address -> Allow Authorization Code flow without a client_secret #1092
Edited oauth2_provider/oauth2_validators.py and added testcases to tests/test_oauth2_validators.py
Ran tox. Seems alright

Checklist

• PR only contains one change (considered splitting up PR)
• unit-test added
• documentation updated
• CHANGELOG.md updated (only for user relevant changes)
• author name in AUTHORS

[codecov]

Codecov Report

Merging #1276 (3ee6e66) into master (016c6c3) will decrease coverage by 0.06%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master    #1276      +/-   ##
==========================================
- Coverage   97.29%   97.24%   -0.06%     
==========================================
  Files          31       31              
  Lines        1996     1996              
==========================================
- Hits         1942     1941       -1     
- Misses         54       55       +1     

Impacted Files	Coverage Δ
oauth2_provider/oauth2_validators.py	93.98% <100.00%> (ø)

... and 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[n2ygk]

This is a nice, clean addition that will help those who follow the latest OAuth 2.0 BCP which deprecates the implicit grant for browser-based apps, instead using authorization code with PKCE and an empty client_secret.

Thanks for this improvement!

[n2ygk]

This is a nice, clean addition that will help those who follow the latest OAuth 2.0 BCP which deprecates the implicit grant for browser-based apps, instead using authorization code with PKCE and an empty client_secret.

Thanks for this improvement!

[bull500]

Thank you @n2ygk for the merge and support! 😄