PKCE instead of implicit #6

Open

Labels

opened

During implicit flow the id_token is seen in URL. This is fine but still if you are recording your screen then an attacker can see it and decrypt your email.

Metadata

Assignees

No one assigned

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests