matik12/aurelia-oauth

Authorization code flow

Closed this issue · 2 comments

brijan commented

HI matik12
Currently, this plugin supports implicit grant flow. Is there any way that I can do similar with Authorization code flow

PeterWone commented

Unless I'm mistaken, authorization code flow is for server-server interactions. This is a SPA plugin for developing client software therefore no ACF.

matik12 commented

Hi brijan,

I am sorry for a late response. As PeterWone mentioned this plugin only supports implicit grant flow which is recommended for Single Page Application according to OAuth2 Authorization Framework specification. Authorization code flow can be used when flow is implemented on the server side (not client side code) because it requires to store secret key to obtain access token. This can be only secured when key is stored on the sever side.

If I can help with anything else, please just ask :)

Mat