[keycloak-dev] Keycloak.js is inefficient and can be improved

Pedro Igor Silva psilva at redhat.com
Mon Feb 9 19:03:36 EST 2015


I think Instagram does that [1], right ?

[1] http://instagram.com/developer/authentication/

----- Original Message -----
From: "Bill Burke" <bburke at redhat.com>
To: keycloak-dev at lists.jboss.org
Sent: Monday, February 9, 2015 8:51:04 PM
Subject: [keycloak-dev] Keycloak.js is inefficient and can be improved

I had a good discussion on OAuth list about javascript and implicit flow 
vs. auth-code flow.  It was pointed out that auth-code flow has some 
extra hops that can be avoided if you implement "response_mode=fragment".

See this:

https://issues.jboss.org/browse/KEYCLOAK-1033


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev


More information about the keycloak-dev mailing list