It is not an isse it is a doubt.

[mdmota]

Xamarin auth currently uses webview. Thinking about security, does the plugin intend to switch to a browser in the future?

How does the plugin guarantee client_secret's security since it is parameterized by the App? Shouldn't that be on the backend?