Gary Archer questions

Gary Archer answers

• Use mkcert certificate for local testing of PWA
• Azure APIM : External Backend API Oauth2 authentication with Bearer token integration
• Getting a new refresh token with AD FS 4.0 (2016) or higher
• Is it okay to Cache verified JWT token to prevent repeated verification process in spring-boot application
• What should my OAuth2 Redirect URL be with an S3 static site frontend and an EC2 API backend?
• Azure JWT verification in Go is not working
• Authorization Code Grant: is it safe to send the tokens to the client?
• Redirect in Chrome Custom tab is not captured for deep link
• Error 400 Cognito /oauth2/token endpoint from client-side javascript
• AppAuth Android not closing browser redirect response on second try (why it is not idempotent action)