Application & API Security
2 diagrams in this category.
OAuth 2.0 Authorization Code Flow
Classic three-party flow where a confidential client exchanges an authorization code for an access token.
OAuth 2.0 Authorization Code Flow with PKCE
Classic three-party flow where a client application exchanges an authorization code for an access token and binds the exchange to a PKCE code verifier.