search

mrodz / fieldz-desktop

Sports Scheduling & Administration Solution
https://www.fieldz.app
Mozilla Public License 2.0
2 stars 0 forks source link

Auth flows should exchange verifier codes for authorization tokens on the server #75

Closed mrodz closed 5 months ago

mrodz commented 5 months ago

This is done on the client for test builds now, but before a release is published, this is blocking. I do not want to ship code that sends my raw CLIENT_SECRET for Firebase, GitHub, Twitter, or Microsoft as a raw HTTP query parameter that can be snooped with Wireshark.

mrodz commented 5 months ago