OIDC for mobile app with PKCE and client_secret
I came across this article. In there the author suggests to use PKCE which is recommended by RFC 8252. But what I am a little bit confused about that the author also uses an application server that has the client_secret.
Are both client_se… Continue reading OIDC for mobile app with PKCE and client_secret