I've commented on a similar issue - https://developer.apple.com/forums/thread/658334?answerId=638461022#638461022.
In short, you are to use Universal Links for HTTP(S) redirection back to the app. They do work, pending correct implementation (which, admittedly, may not always be too straight forward).
WKWebView is not an exact functional replacement for ASWebAuthenticationSession. It is not suitable for an app developed by a different business entity than one managing the authentication/authorization system, a third-party app, which is not supposed to have access to the user credentials. And, WKWebView cannot provide SSO experience between apps belonging to different development teams, which includes the system browsers.
Topic:
App & System Services
SubTopic:
Core OS
Tags: