Authorization Code grant type with Proof Key for Code Exchange (PKCE) in OAuth 2.1
Public clients like Native mobile applications or Single Page Applications cannot securely store Client Secret in Authorization Code grant type. Decode source of the mobile application or view source code of Single Page Application, we can see this Client Secret information. So OAuth introduces Proof… Read More