Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
OAuth is an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.
18
votes
2
answers
6k
views
Does PKCE replace state in the Authorization Code OAuth flow?
PKCE explanation: https://www.oauth.com/oauth2-servers/pkce/
OAuth Flow example: https://developer.okta.com/docs/guides/implement-auth-code-pkce/use-flow/
My question is more specifically: Is there any … state stops CSRF attacks by having the app server verify the state it gave the client is the same as the state the client gives it (after making the first OAuth request)
App Server generates random state …