4 ms·
If you control the client, you can. Because when you get the redirect response, you then take the auth code that is included there, and you don’t follow the red
by codetrotter 3y ago
If you control the client, you can. Because when you get the redirect response, you then take the auth code that is included there, and you don’t follow the redirect.
Then you send the auth code to your backend instead.
- randomdata 3y agoTypically if you farm the job out to a browser, per the discussion, then you don't have control over the client.
- codetrotter 3y agoI took it to mean that they render the login page in a web view still controlled by their app