Post #1048102

Neat to see an identity provider that includes a big "hey while you shouldn't use the implicit flow with SPAs you can totally still use it with traditional web sites". And....that is true, but like, the authorization code flow is just...better... in basically every way. I think they mean this in a "if you have an old app that's still using it, that's okay" but it doesn't read that way and it feels weird.