News for hackers. Stuff that matters.

A comment on Understanding OAuth 2.0 and OpenID Connect. Parent comment

Re:Understanding OAuth 2.0 and OpenID Connect by rdegges on Monday April 30, 2018 @03:50PM (#16961662)
Unfortunately, most SPA apps don't have a server side backed and thus cannot benefit from the additional security that the Authorization Code flow provides.
[ Parent | on HN ]
Re:Understanding OAuth 2.0 and OpenID Connect by idubrov on Monday April 30, 2018 @04:47PM (#16962172)
They are in the same category as mobile apps in that respect, no? Both of them are "public clients" in terms of OAuth 2.0.
[ Parent | on HN ]