Roles, Tokens & the Authorization Code Flow. Authorization, Not Authentication. OAuth 2.0 lets a user grant a third-party app limited access to their resources on another service — WITHOUT sharing their password. It solv…
ReadPKCE, Refresh Tokens & OpenID Connect. Confidential vs. Public Clients & PKCE. A confidential client (server-side web app) can hold a secret safely. A public client (mobile app, SPA) can't — its code is visible to the us…
ReadSave this stack to your personal DevRecall — add your own notes, track what you're learning, and share what you know with the community.
Get started — free forever