We're happy to announce a new version of Pitcher Impact for iOS, which includes Salesforce's latest mandatory security updates for Connected Apps and External Client Apps (ECAs).

Background

Salesforce has introduced enhanced OAuth 2.0 security standards for all partner applications integrated with their platform, enforcing PKCE (Proof Key for Code Exchange) and Refresh Token Rotation — mechanisms that protect authentication flows from interception and token misuse. This change is mandatory for all Salesforce-connected applications, including Pitcher Impact

What's New in 2.85.1325

Pitcher Impact now fully supports Salesforce's updated OAuth 2.0 requirements:

• PKCE on the authorization code flow used for Salesforce login.
• Refresh Token Rotation, so Pitcher Impact automatically handles rotating refresh tokens issued by Salesforce.

What You Need to Do

Update to Pitcher Impact 2.85.1325 as soon as possible. No manual reconfiguration is required on the Pitcher or Salesforce side as it is applied automatically.