Hot answers tagged


OAuth2 is a way of storing a session token. It is, however, standardized and the the threat model is well documented. Even though OAuth2 was indeed designed for 3rd-party access to APIs, it is still relevant in 1st-part scenarios. Regarding mobile applications and authentication UI, there are 2 ways of doing it: using a native UI that sends the ...

Only top voted, non community-wiki answers of a minimum length are eligible