DEV Community

Discussion on: Browser Extension with OAuth 2.0 Authorization

Collapse
 
valmiremini profile image
valmiremini

But isn't it unsafe to store the client secret in the extension?

Collapse
 
murilo001 profile image
Murilo Oliveira

I would like to know that too

Collapse
 
aaronpk profile image
Aaron Parecki

Yes, you should never embed a client secret in a browser extension or even a native app.