Roles, Tokens & the Authorization Code Flow Authorization, Not Authentication OAuth 2.0 lets a user grant a third-party app limited access to their resources on another service — WITHOUT sharing their password. It solves…
ReadPKCE, Refresh Tokens & OpenID Connect Confidential vs. Public Clients & PKCE A confidential client (server-side web app) can hold a secret safely. A public client (mobile app, SPA) can't — its code is visible to the user…
ReadSave this stack to your personal DevRecall — add your own notes, track what you're learning, and share what you know with the community.
Get started — free forever