Azure AD Auth Code Flow w/ PKCE and CORS

[ghost]

Expected behaviour

Actual behaviour

What are the steps to reproduce this issue?

Any logs, error output, etc?

Any other comments?

Azure gave the above warnings and before enabling it for my apps I was curious if the project supported this and if there are any changes I am required to make.

Thanks.