Allow Authorization Code flow without a client_secret - Initial commit with Patch & testcases

[bull500]

Hello @n2ygk
Here's the PR

Fixes#1092

Description of the Change

Patch to address -> Allow Authorization Code flow without a client_secret #1092
Edited oauth2_provider/oauth2_validators.py and added testcases to tests/test_oauth2_validators.py
Ran tox. Seems alright

Checklist

• PR only contains one change (considered splitting up PR)
• unit-test added
• documentation updated
• CHANGELOG.md updated (only for user relevant changes)
• author name in AUTHORS

[codecov]

Codecov Report

Merging #1276 (3ee6e66) into master (016c6c3) will decrease coverage by 0.06%.
The diff coverage is 100.00%.

@@ Coverage Diff @@## master #1276 +/- ## ========================================== - Coverage 97.29% 97.24% -0.06%  ========================================== Files 31 31 Lines 1996 1996 ========================================== - Hits 1942 1941 -1 - Misses 54 55 +1 

Impacted Files	Coverage Δ
oauth2_provider/oauth2_validators.py	93.98% <100.00%> (ø)

... and 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[n2ygk]

This is a nice, clean addition that will help those who follow the latest OAuth 2.0 BCP which deprecates the implicit grant for browser-based apps, instead using authorization code with PKCE and an empty client_secret.

Thanks for this improvement!

[n2ygk]

This is a nice, clean addition that will help those who follow the latest OAuth 2.0 BCP which deprecates the implicit grant for browser-based apps, instead using authorization code with PKCE and an empty client_secret.

Thanks for this improvement!

[bull500]

Thank you @n2ygk for the merge and support! 😄