---

layout: post
date: 2022-04-30
link: https://www.scottbrady91.com/angular/migrating-oidc-client-js-to-use-the-openid-connect-authorization-code-flow-and-pkce
title: Migrating oidc-client-js to Authorization Code Flow + PKCE
cited: Scott Brady

---

> recommendation of abandoning the implicit flow in browser-based applications, e.g. Single Page Applications (SPAs), in favor of the authorization code flow with Proof-Key for Code Exchange (PKCE)