Meaning: client can be used for public (or mobile) scenarios where no client_secret (or authorization authentication) is possible but PKCE is used in order to protect the redirect flow
We have created an issue in Pivotal Tracker to manage this. Unfortunately, the Pivotal Tracker project is private so you may be unable to view the contents of the story.
The labels on this github issue will be updated when the story is started.
This feature needs a UAA with enhancement from https://github.com/cloudfoundry/uaa/pull/1888
Then you can run uaac client ..., e.g.
uaac client update cf --allowpublic true or uaac client update --allowpublic true
The option is displayed in uaac client get
Meaning: client can be used for public (or mobile) scenarios where no client_secret (or authorization authentication) is possible but PKCE is used in order to protect the redirect flow