New answers tagged

0 votes

Oauth2 without browser on native apps

Is password grant flow still recommended? No, the Resource Owner Password Credential flow is not recommended anymore: The latest OAuth 2.0 Security Best Current Practice disallows the password grant ...
ysdx's user avatar
  • 1,499
0 votes

why was implicit flow conceived?

In the Authorization Code Flow the authorization code is obtained directly by the client's user agent, but exchanging it for an access token can be done with a server-to-server request, with the ...
Heiko Theißen's user avatar

Top 50 recent answers are included