The authorization code flow now supports Proof Key for Code Exchange (PKCE) which enables public clients, like native apps or single-page apps, to perform the authorization code flow securely.
Check out the API reference for more on using PKCE in your application.