Support Authorization Code Grant

mattmazzola / react-simple-auth

Authentication library for React based on Ember-Simple-Auth

MIT License

56 stars 15 forks source link

Support Authorization Code Grant #6

Open flyfishMT opened 5 years ago

flyfishMT commented 5 years ago

Thanks for the great work. I have a Feature Request - I don't think it would take too much to support Authorization Code Grant with a Public Client (no client secret). This seems to be recommended more these days over implicit for Single Page Apps. Also, it would give the opportunity to implement a refresh token. Thanks

flyfishMT commented 4 years ago

Here are some supporting docs -

https://medium.com/@robert.broeckelmann/securely-using-the-oidc-authorization-code-flow-and-a-public-client-with-single-page-applications-55e0a648ab3a
https://developer.okta.com/blog/2019/08/22/okta-authjs-pkce

I'd be interested in submitting a PR, but would like some guidance and where to the HTTP calls would live, what HTTP library to use, etc.