It is 2023 and I am still having to explain the dangers of the OAuth Implicit Flow because I am still finding current documentation suggesting otherwise. Time to make another video to follow up on the one from 4 years ago?
5
4
24
What’s the TL;DR? Other than “don’t use implicit flow” 😅
1
Replying to @ottokruse
That's the TLDR. The longer version is explaining the intricacies in how the implicit flow relates to OpenID Connect and all the combinations of response types and response modes

Jun 8, 2023 · 1:15 PM UTC