In order to use external browsers in a secure way, as a user I want support for RFC 7636

dmfs / oauth2-essentials

An OAuth2 client implementation based on http-client-essentials.

Apache License 2.0

86 stars 21 forks source link

Closed dmfs closed 7 years ago

dmfs commented 7 years ago

RFC 7636 adds a mechanism to protect the auth code in a way that makes it (nearly) impossible for a MITM attacker to hijack it.

dmfs commented 7 years ago

closed by #22