Because we don’t want our application to redirect to a 3rd party identity provider (e.g. Auth0’s hosted login page), we were thinking about following this flow to authenticate a user in our SPA. The user inputs his username and password into a form in our SPA. The SPA sends a POST request to the /l…

Is this SPA authentication flow secure?

Topic		Replies	Views
New auth0 spa js Get Help	4	3164	October 4, 2019
Solution validation Get Help jwt , spa , refresh-tokens , access-token , flow	2	4110	March 2, 2018
Using Code Grant with SPA + REST API Get Help authorization-flow	2	3924	August 28, 2019
Renewal of tokens in a SPA Get Help spa , refresh-tokens , tokens	3	7164	March 2, 2018
Saving refresh token in browser Get Help refresh-tokens , password-grant	6	3952	November 18, 2019