Commit 6dbefc9

version: 1.5.0

minor: 1.5.X

* [IonicGeneralAuthOptions](#ionicgeneralauthoptions)

**● authConfig**: *"auth0" \| "azure" \| "cognito" \| "general"*

<a id="ionicauthoptions.webauthflow"></a>

**● webAuthFlow**: *"implicit" \| "PKCE"*

Authentication flow to use on web defaults to: `implicit` `PKCE` is not supported by Azure, if `authConfig` is set to `azure` the plugin will use `implicit` despite `webAuthFlow` value

<a id="ionicgeneralauthoptions"></a>

**IonicGeneralAuthOptions**:

<a id="ionicgeneralauthoptions.alwayssendclientsecretonlogin"></a>

**● alwaysSendClientSecretOnLogin**: *`undefined` \| `false` \| `true`*

should the 'client\_secret' value always be passed in for login calls, regardless of implict(web) or not defaults to: true

<a id="ionicgeneralauthoptions.androidtoolbarcolor"></a>

**● androidToolbarColor**: *`undefined` \| `string`*

setting to allow the toolbar color of the android webview control to be set. Takes a string that can be parsed as a color by `android.graphics.Color.parseColor`

<a id="ionicgeneralauthoptions.audience"></a>

**● audience**: *`undefined` \| `string`*

Provided audience (aud) value

<a id="ionicgeneralauthoptions.authconfig"></a>

**● authConfig**: *"auth0" \| "azure" \| "cognito" \| "general"*

The type of the Auth Server, currently only the following are supported:

* Auth0

* Azure Active Directory

* Cognito (AWS)

<a id="ionicgeneralauthoptions.clientid"></a>

**● clientID**: *`string`*

Provided Application ID

<a id="ionicgeneralauthoptions.clientsecret"></a>

**● clientSecret**: *`undefined` \| `string`*

The client secret, optional only required for Cognito/Web

<a id="ionicgeneralauthoptions.discoveryurl"></a>

**● discoveryUrl**: *`undefined` \| `string`*

Location of the Auth Server's discovery endpoint, can be null for Azure

<a id="ionicgeneralauthoptions.implicitlogin"></a>

**● implicitLogin**: *"CURRENT" \| "POPUP"*

for implicit login (aka web) should the auth window be opened in a new popup window/tab or the current windwow/tab defaults to: `POPUP` for `CURRENT` to work the app will need to call `IIonicAuth::handleCallback` when the auth service navigates to the url set in `redirect_url`

<a id="ionicgeneralauthoptions.ioswebview"></a>

**● iosWebView**: *"private" \| "shared"*

setting the option to `shared` allows for sharing a session between Safari and other applications for a true SSO experience between apps but on iOS 11 and higher it will prompt the user for permission to share the website data with the application. Using `private` avoids the prompt but the session will only be shared with Safari on iOS 10 or lower.

<a id="ionicgeneralauthoptions.loglevel"></a>

**● logLevel**: *"DEBUG" \| "ERROR" \| "NONE"*

The log level for the module

<a id="ionicgeneralauthoptions.logouturl"></a>

**● logoutUrl**: *`string`*

Location that the hosting app expects logout callbacks to navigate to.

<a id="ionicgeneralauthoptions.platform"></a>

**● platform**: *"web" \| "cordova" \| "capacitor"*

Are we hosted in cordova, web, capacitor

<a id="ionicgeneralauthoptions.redirecturi"></a>

**● redirectUri**: *`undefined` \| `string`*

Location that the hosting app expects callbacks to navigate to.

<a id="ionicgeneralauthoptions.scope"></a>

**● scope**: *`undefined` \| `string`*

User details requested from the Authentication provider, each provider may support standard {e.g. openid, profile, email, etc.}, or custom scopes.

<a id="ionicgeneralauthoptions.tokenstorageprovider"></a>

**● tokenStorageProvider**: *"localStorage" \| [TokenStorageProvider](#tokenstorageprovider) \| [IVUserInterface](#ivuserinterface)*

The type of storage to use for the tokens

<a id="ionicgeneralauthoptions.webauthflow"></a>

**● webAuthFlow**: *"implicit" \| "PKCE"*

Authentication flow to use on web defaults to: `implicit` `PKCE` is not supported by Azure, if `authConfig` is set to `azure` the plugin will use `implicit` despite `webAuthFlow` value

* **web:** add PKCE auth flow option

* reject if user closed the auth browser

* **ios, android, web:** SE-132: allow client_secret to be passed into authorization calls.

* propagate network errors on login

* update to general to send client secret in payload of token call