Hi:
Thanks for everyone's efforts and comments to help me to get this release running as OAuth2 implicit grant.
For application security concern, I would hope the team can release an example with demonstrating Oauth2 authorization code grant with OpenID connect for authentication , plus excluding attributes ( ClientId ,AppWebDomain,TokenScopesArray,RedirectUriSignIn, RedirectUriSignOut ) out of client side javascript as much as possible, for example , hiding them into lambda code for events such as sign in, sign out, registration , registration verification.
If the team knew such example already existed, please advise me in thread. Thanks again.
Hi: Thanks for everyone's efforts and comments to help me to get this release running as OAuth2 implicit grant.
For application security concern, I would hope the team can release an example with demonstrating Oauth2 authorization code grant with OpenID connect for authentication , plus excluding attributes ( ClientId ,AppWebDomain,TokenScopesArray,RedirectUriSignIn, RedirectUriSignOut ) out of client side javascript as much as possible, for example , hiding them into lambda code for events such as sign in, sign out, registration , registration verification.
If the team knew such example already existed, please advise me in thread. Thanks again.
Ming Qin