refactor(server): improve oauth login flow (#10648)

close CLOUD-145

packages/frontend/apps/ios/App/App/Plugins/Auth/AuthPlugin.swift

@@ -46,8 +46,9 @@ public class AuthPlugin: CAPPlugin, CAPBridgedPlugin {
         let endpoint = try call.getStringEnsure("endpoint")
         let code = try call.getStringEnsure("code")
         let state = try call.getStringEnsure("state")
+        let clientNonce = call.getString("clientNonce")
         
-        let (data, response) = try await self.fetch(endpoint, method: "POST", action: "/api/oauth/callback", headers: [:], body: ["code": code, "state": state])
+        let (data, response) = try await self.fetch(endpoint, method: "POST", action: "/api/oauth/callback", headers: [:], body: ["code": code, "state": state, "client_nonce": clientNonce])
         
         if response.statusCode >= 400 {
           if let textBody = String(data: data, encoding: .utf8) {

packages/frontend/apps/ios/src/app.tsx

@@ -177,11 +177,12 @@ framework.scope(ServerScope).override(AuthProvider, resolver => {
       });
       await writeEndpointToken(endpoint, token);
     },
-    async signInOauth(code, state, _provider) {
+    async signInOauth(code, state, _provider, clientNonce) {
       const { token } = await Auth.signInOauth({
         endpoint,
         code,
         state,
+        clientNonce,
       });
       await writeEndpointToken(endpoint, token);
       return {};

packages/frontend/apps/ios/src/plugins/auth/definitions.ts

@@ -8,6 +8,7 @@ export interface AuthPlugin {
     endpoint: string;
     code: string;
     state: string;
+    clientNonce?: string;
   }): Promise<{ token: string }>;
   signInPassword(options: {
     endpoint: string;