Ravi Sir's Cards › AWS
Public vs confidential app client?
This interview card answers: Public vs confidential app client? Public (mobile/SPA) has no client secret; confidential (server) can use a secret. Use PKCE for public clients. React SPA = public+PKCE; backend = confidential.
Read card text
What this card says
What it is
Public (mobile/SPA) has no client secret; confidential (server) can use a secret.
app client
Why it matters
Use PKCE for public clients.
How / example
React SPA = public+PKCE; backend = confidential.