Gary Archer questions

Gary Archer answers

• AWS HTTP API Gateway jwt validation
• Do I generate a new PKCE challenge every time or is it something that can be stored?
• Could we make OAuth2Session refresh token x seconds before it expires?
• Use mkcert certificate for local testing of PWA
• Azure APIM : External Backend API Oauth2 authentication with Bearer token integration
• Getting a new refresh token with AD FS 4.0 (2016) or higher
• Is it okay to Cache verified JWT token to prevent repeated verification process in spring-boot application
• What should my OAuth2 Redirect URL be with an S3 static site frontend and an EC2 API backend?
• Azure JWT verification in Go is not working
• Authorization Code Grant: is it safe to send the tokens to the client?