You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
the entry for Your clients reside in user controlled devices with the ability to authorize through a web based workflow. This workflow is inherently insecure, restrict the privileges associated with tokens accordingly.
suggests to use Implicit Grant, but Implicit Grant is now considered to be unacceptably insecure and is being depreciated in favor of Authorization Code with PKCE
How to reproduce
Go to the page, read the section, compare to the official documentation linked below
Expected behavior
the document should match the official recommendation