Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Documentation Error: Implicit Grant is being depreciated in favor of Authorization Code + PKCE #794

@Xpyder

Description

@Xpyder

Describe the bug
on https://oauthlib.readthedocs.io/en/latest/oauth_1_versus_oauth_2.html

the entry for
Your clients reside in user controlled devices with the ability to authorize through a web based workflow. This workflow is inherently insecure, restrict the privileges associated with tokens accordingly.
suggests to use Implicit Grant, but Implicit Grant is now considered to be unacceptably insecure and is being depreciated in favor of Authorization Code with PKCE

How to reproduce

Go to the page, read the section, compare to the official documentation linked below

Expected behavior

the document should match the official recommendation

Additional context
https://oauth.net/2/grant-types/implicit/ (includes several further reading links at the bottom)
https://oauth.com/playground/index.html (choose implicit flow and read the content of step 2)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions