RootCauseunvalidated
The choice impacts more than whether the token request needs a secret; it changes the overall end-to-end security model (where tokens live, which party can call the token endpoint, and protection against browser-side injection/malicious JS).
627f3bfc-edb3-4b34-9e3e-070e2442cdd8
The choice impacts more than whether the token request needs a secret; it changes the overall end-to-end security model (where tokens live, which party can call the token endpoint, and protection against browser-side injection/malicious JS).