Learn how the Authorization Code flow works and why you should use it for regular web apps. The Authorization Code Flow (defined in OAuth 2.0 RFC 6749, section 4.1), involves …

Learn about the OAuth 2.0 grant type, Authorization Code Flow with Proof Key for Code Exchange (PKCE). Use this grant type for applications that cannot store a client secret, such …

Learn about the various flows used for authentication and authorization of applications and APIs.

The Authorization Code Flow is used by server-side applications that are capable of securely storing secrets, or by native applications through Authorization Code Flow with PKCE.

The Auth0 Single-Page App SDK provides high-level API for implementing Authorization Code Flow with PKCE in SPAs. If your SPA doesn’t need an Access Token, you can use the Implicit …

This tutorial will help you call your own API using the Authorization Code Flow. If you want to learn how the flow works and why you should use it, see Authorization Code Flow.

Learn how to add login to your regular web application using the Authorization Code Flow.

This tutorial helps you call your own API from a native, mobile, or single-page app using the Authorization Code Flow with PKCE. To learn how the flow works and why you should use it, …

Learn how the Resource Owner Password flow works and why you should use it for highly-trusted applications.

Learn how to use JWT-Secured Authorization Requests (JAR) with the Authorization Code Flow.