mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
5f2b88be51
* refactor user login guide (#2921) * docs: fix docusaurus issues * update yarn dep Co-authored-by: Max Peintner <[email protected]>
11 lines
711 B
Plaintext
11 lines
711 B
Plaintext
:::caution Security Notice
|
|
In contrast to the Code Flow, where you'll receive a code for token exchange, with the implicit flow you'll receive
|
|
the tokens directly from the authorization endpoint. This is unsecure and might lead to token leakage and replay attacks.
|
|
It will further be removed in OAuth 2.1 for the exact same reason.
|
|
|
|
We therefore discourage the use of Implicit Flow and do not cover the flow in this guide.
|
|
:::
|
|
|
|
If you still need to rely on the implicit flow, simply keep in mind that the response on the authorization_endpoint is
|
|
the same you would be given on the token_endpoint and check the [OAuth / OIDC endpoint documentation](../../../apis/openidoauth/endpoints.md) for more information.
|