AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
2min chapter
OAuth, "It's complicated." (Interview)
The Changelog: Software Development, Open Source
Is Pixy a Replacement for a Client Secret?
Pixy is not a replacement for a client secret, and has nothing to do with whether or not you have a client secret. Pixy is useful to make sure that the thing that's requesting the authorization code is the same thing that's cang t be using that authoris agion code later. If you have the ability authenticate the client, then you absolutely should, even if you're doing pixy. So that request for a token is where over the back chanel. That can be authenticated for clients that have credentials, meaning web sever bas taps,. You can do it there as well. Just be per instance authentication of some sort. And that, again,
00:00
Transcript
Episode notes
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode