search

oauth-wg / oauth-v2-1

OAuth 2.1 is a consolidation of the core OAuth 2.0 specs
https://oauth.net/2.1/
Other
52 stars 27 forks source link

Strict JavaScript Exclusiveness? #174

Open MozharAlhosni opened 7 months ago

MozharAlhosni commented 7 months ago

Under Token Endpoint, it states:

Authorization servers that wish to support browser-based applications (applications running exclusively in client-side JavaScript without access to a supporting backend server)

However, the sentence "running exclusively in client-side JavaScript" imposes strict exclusiveness, regardless that these client-side browser-based applications may be running WebAssembly (for example, like Blazor WebAssembly web applications).