Gary Archer questions

Gary Archer answers

• Error 400 Cognito /oauth2/token endpoint from client-side javascript
• AppAuth Android not closing browser redirect response on second try (why it is not idempotent action)
• Still struggling to understand Id Token vs Access Token in OIDC / OAUTH2.0
• Using react-native-app-auth plugin with Fitbit OAuth 2.0
• Best practice on Securing code_verifier in PKCE-enhanced Authorization Code Flow
• How to build redirect uri for Mobile App for SSO
• How to split an IdentityServer4 MVC application into front-end UI/API and back-end API for secure hosting in DMZ?
• Best practice for id_token vs. access_token use in AWS Lambda
• Should access tokens be refreshed automatically or manually?
• Error message caught by Axios is undefined in production, but works locally?