Get the latest tech news
An illustrated guide to OAuth
OAuth was first introduced in 2007.
*I'm reliably informed by a friend in security that the OAuth designers learned a bunch of lessons the hard way, and that is another reason why it is so complicated: because it had to be patched repeatedly. So, theoretically, you could exchange your authorization code for an access token right on the frontend, in JavaScript, by making a POST fetch request. I may cover PKCE in a future post, as it is now recommended for the standard flow as well, since it helps protect against auth code interception.
Or read this on Hacker News
