I have a question about OAuth.
If my client application is a web application compatible with the use of a client secret (Or PKCE). In this scenario, why is it not possible to use client secret with the Implicit grant flow?
I mean, that would have been better (faster) for these web app, because they wouldn’t need anymore to use an Authorization code.
It’s just a question to understand Oauth processes.
New contributor
Alex BCH is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.