Regular OAuth 2.0 also supports the Authorization Code flow ... • Aaron Parecki

61°F

Khor https://twitter.com/neth_6 • Aug 8
The link you shared is for Implicit? Implicit does not use client secret. Does this mean IndieAuth is more similar to Implicit than Auth Code but is more secure as the client id has to be redirect uri?

Regular OAuth 2.0 also supports the Authorization Code flow with no secret. In fact, many companies recommend Auth Code w/no secret instead of Implicit.

IndieAuth is like taking Auth Code w/no secret and adding back some layers of security because of the client ID being a URL.

Portland, Oregon, USA • 64°F

Wed, Aug 8, 2018 7:42am -07:00

1 like 1 reply
- Khor
Have you written a response to this? Let me know the URL:
- Khor twitter.com/neth_6
  
  Got it. I read the link you shared but I must have missed the part about Auth Code flow with no client secret. Sorry.
  
  Wed, Aug 8, 2018 2:46pm +00:00 (via brid-gy.appspot.com)

Posted in /replies using quill.p3k.io