Migrating oidc-client-js to Authorization Code Flow + PKCE

recommendation of abandoning the implicit flow in browser-based applications, e.g. Single Page Applications (SPAs), in favor of the authorization code flow with Proof-Key for Code Exchange (PKCE)

»Scott Brady →