Gary Archer questions

Gary Archer answers

• Oauth pkce flow impersonating someone else's client
• AWS Cognito - using scopes in authorizing access to api gateway
• How to add email to Cognito access token?
• What's the difference between User.Read and OpenID+Profile+Email scopes
• How to support authorization token in WKWebView?
• Authentication between microservices: Amazon API Gateway
• React build not working without adding index.html in URL [AWS S3 and Cloudfront deployment]
• Authorization and Authentication in microservices - the good way
• Explain Offline Token validation vs Online Token validation in Open ID connect ? Advantages, limitations & tradeoffs
• Set OpenID Connect CallbackPath to HTTPS