Using with Chrome about oauth2

[fvisticot]

I'm interested as well to get oAuth support for WEB application.
BUT it seems that oAuth workflow is different when used for WEB application (due to security reason).
In case of WEB (PWA application) it seems required to use oAuth implicit workflow or PKCE

https://medium.com/oauth-2/why-you-should-stop-using-the-oauth-implicit-grant-2436ced1c926
https://aaronparecki.com/oauth-2-simplified/

[TheMchurch]

Thank you very much. I’ll read it for sure. Merry Christmas! Il giorno mer 25 dic 2019 alle 23:23 fvisticot <[email protected]> ha scritto:

I'm interested as well to get oAuth support for WEB application. BUT it seems that oAuth workflow is different when used for WEB application (due to security reason). In case of WEB (PWA application) it seems required to use oAuth implicit workflow or PKCE https://medium.com/oauth-2/why-you-should-stop-using-the-oauth-implicit-grant-2436ced1c926 https://aaronparecki.com/oauth-2-simplified/ — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#61?email_source=notifications&email_token=AAS56DNQICKA3SSZ6IDEEVLQ2PMOVA5CNFSM4J6MXPQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHUUGCQ#issuecomment-568935178>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAS56DP4FLUCSVYT2GJIAQLQ2PMOVANCNFSM4J6MXPQA> .

-- Sent from Gmail Ipad

[jonasfj]

Writing up a minimal example that works with dart2js in the browser is a good start to fixing this.

I suspect you might be running into a CORS issue or browser security issue. Maybe your oauth2 server is missing some headers to allow requests. Or maybe we're sending some headers that we don't need to be sending in the browser context.