Timeline for Should an SPA use OIDC's Implicit flow or Auth Code flow?
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 17, 2020 at 13:36 | comment | added | Eric B. | PKCE is great for exchanging access tokens and refresh tokens but the concern remains having the refresh tokens in the browser which I still don't know if is safe or not. But I suppose if only the AT is exchanged then it would be ok. | |
| Jan 16, 2020 at 23:06 | history | answered | Justin | CC BY-SA 4.0 |