Hi everyone, I’m using the latest version of lock (11.9.0) and I have some concerns about the security of redirect mode. During login in redirect mode the access token is passed to the redirect URL and is visible for a second in the browser address bar and it also appears in the browser history. My…

Concerns about access token in URL and browser history

nh43de September 11, 2018, 5:16pm 2

Any updates to this?

Not getting a refresh token from Auth0.authorize() - PKCE

Topic		Replies	Views
Access token is missing after redirect Get Help lock , access-token , hash , redirect	3	4820	March 2, 2018
Getting both tokens and redirection with Lock 10 for web Get Help lock-10 , tokens , redirect	5	4112	March 2, 2018
Move access token from URL to header Get Help login	3	2408	November 9, 2020
How to remove access token from URL Get Help	3	8904	September 2, 2019
Route provided to redirectUri holding onto hash value after redirect Get Help	2	3922	September 18, 2019