3 ms·
If you're in a situation where you would otherwise be using the implicit flow, can't you just throw the refresh token away? That should approximate the implicit
by apitman 2y ago
If you're in a situation where you would otherwise be using the implicit flow, can't you just throw the refresh token away? That should approximate the implicit flow.
- taeric 2y agoThis is what I'm currently doing. If my thread model includes malicious client, though, it doesn't work. Trivial to intercept.