Gary Archer questions

Gary Archer answers

• Is it okay to Cache verified JWT token to prevent repeated verification process in spring-boot application
• What should my OAuth2 Redirect URL be with an S3 static site frontend and an EC2 API backend?
• Azure JWT verification in Go is not working
• Authorization Code Grant: is it safe to send the tokens to the client?
• Redirect in Chrome Custom tab is not captured for deep link
• Error 400 Cognito /oauth2/token endpoint from client-side javascript
• AppAuth Android not closing browser redirect response on second try (why it is not idempotent action)
• Still struggling to understand Id Token vs Access Token in OIDC / OAUTH2.0
• Using react-native-app-auth plugin with Fitbit OAuth 2.0
• Best practice on Securing code_verifier in PKCE-enhanced Authorization Code Flow