Change OAuth2 grant type from implicit to Authorization Code Flow with PKCE

cablelabs / lpwanserver

LPWAN Provisioning & Management Server

https://lpwanserver.com

Apache License 2.0

39 stars 11 forks source link

Change OAuth2 grant type from implicit to Authorization Code Flow with PKCE #334

Closed rhythnic closed 4 years ago

rhythnic commented 4 years ago

The app currently uses the implicit grant type, but this is no longer recommended best practice. The best practice for a single page application is Authorization Code Flow with Proof Key for Code Exchange (PKCE)

https://auth0.com/docs/flows/concepts/auth-code-pkce