OAuth2 - Implicit Flow

Implicit flow is used in old web applications and SPA but due to the expose of access token in URL, it has been deprecated, but let's try to understand it in this thread.

#dotnet #webdeveloper #authentication
Thread 👇 As a first step, the user visits the client app and chooses an OAuth provider(Google) to login.

OAuth2 - Authorization code + PKCE flow

The PKCE flow is developed with additional three parameters with the Authorization Code flow.

We are going to look at the process of Canva's login with google as an OAuth provider.

#dotnet #webdevelopment #100daysofcode
👇 Thread As a first step, the user visits Canva and select Google to sign in.

Many of us have certainly come across the OAuth2 framework or using it without knowing it.

For example, when we visit Canva, we can sign in with our google account, in this case, google acts as an OAuth provider.

👇 Thread OAuth2 provides a way to access web apps with limited access to the user's account. it grants this access without sharing the password.

it functions with 3 entities that commonly use HTTP requests to communicate.
Client App - Canva
Resource owner - User
OAuth Provider - Google