hard20 pts · first answer countsoauthauthentication

OAuth for a browser-only app

A single-page app with no backend of its own must sign users in with an OAuth 2.0 provider. Which flow follows current best practice?

A.Implicit flow, returning the access token in the URL fragmentB.Resource owner password grant, collecting the user’s password in your formC.Authorization code flow with PKCE and a state parameterD.Authorization code flow with the client secret embedded in the bundle

Discussion 0

Join free to post in the discussion.

OAuth for a browser-only app

Discussion 0

Related questions