Gary Archer questions

Gary Archer answers

• Using react-native-app-auth plugin with Fitbit OAuth 2.0
• Best practice on Securing code_verifier in PKCE-enhanced Authorization Code Flow
• How to build redirect uri for Mobile App for SSO
• How to split an IdentityServer4 MVC application into front-end UI/API and back-end API for secure hosting in DMZ?
• Best practice for id_token vs. access_token use in AWS Lambda
• Should access tokens be refreshed automatically or manually?
• Error message caught by Axios is undefined in production, but works locally?
• AJAX request not sending cookies (NET 5)
• How can I allow apps to claim "https" scheme URIs? (i.e How can I open a desktop application from https URL?)
• Token exchange grant support in AWS Cognito