2
votes
Integrating Biometrics with Auth Code Flow (w/ PKCE) on mobile
It is best practice for native mobile apps to use oAuth2 auth code flow with PKCE and avoid ROPC/implicit flow.
The current best practice is that you should use the authorization code flow with PKCE.
...
2
votes
Integrating Biometrics with Auth Code Flow (w/ PKCE) on mobile
It is best practice for native mobile apps to use oAuth2 auth code flow with PKCE
I assume you're talking about OIDC (which is built on OAuth2) as we're talking about authentication, but yes the auth ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
mobile × 1074android × 190
authentication × 123
ios × 116
encryption × 88
phone × 70
privacy × 65
appsec × 50
tls × 49
web-application × 45
iphone × 42
sms × 39
malware × 36
wifi × 35
network × 34
gsm × 33
smartphone × 32
simcard × 31
passwords × 27
man-in-the-middle × 27
multi-factor × 27
cryptography × 23
vpn × 21
api × 21
rest × 21