Mandatory Security Updates for Connected Apps and ECAs

[Lufan]

Hello. I am trying to understand how to use the jsforce to meet new SF requirements regarding getting changes refresh token when access token requested and enabling PKCE (Proof Key for Code Exchange)

https://partners.salesforce.com/pdx/s/pcnews/mandatory-security-updates-for-connected-apps-and-ecas-MCFBLDLDQ2TVDZFA22GLAMBVEZGY?language=en_US

I not found any information on the documentation and other issues.

Is this somehow supported or not?

Update: on the code i see that OAuth2 constructor accept parameter useVerifier which should enable the PKCE

only issue then with refresh token rotation and conn.on("refresh", (accessToken, res) => {}) function as it ignore refresh token

Update2: seems it not works, so need to handle it manually;