DEV Community

Discussion on: Demystifying OAuth 2.0 - A Tutorial & Primer

Collapse
 
cdian profile image
cdian

The pkce challenge is also stored in a public client. This is also insecure like the implicit flow.