News for hackers. Stuff that matters.

A comment on Understanding OAuth 2.0 and OpenID Connect. Parent comment

Re:Understanding OAuth 2.0 and OpenID Connect by UncleMeat on Monday April 30, 2018 @05:52PM (#16962765)
Yep. I'm fairly concerned about an identity management company publishing this information.
[ Parent | on HN ]
Re:Understanding OAuth 2.0 and OpenID Connect by caseysoftware on Monday April 30, 2018 @09:47PM (#16964047)
Author here -

Entirely agree and we recommend using Auth Code+PKCE whenever possible. This post is intended to be the first of a few starting with the base spec. In the next one, I plan to go over the RFCs for JWT, Revocation, Inspection, PKCE, the AppAuth pattern, and probably a few others.

Thanks for the note though.

[ Parent | on HN ]
Re:Understanding OAuth 2.0 and OpenID Connect by rahulrav on Tuesday May 01, 2018 @08:11AM (#16966326)
Thanks for the shoutout to AppAuth (https://appauth.io). It’s our 20% project at Google.
[ Parent | on HN ]