Securing Blazor WebAssembly Apps

Blog Discussions
, , ,
210

Hi,

I guess I found the answer to the last question of my former topic by myself…
I could keep my current AuthenticateStateProvider class to call my own API ( with REST or gRPC ), and my API could authenticate with Auth0 using Resource Owner Password Flow:

https://auth0.com/docs/get-started/authentication-and-authorization-flow/call-your-api-using-resource-owner-password-flow#example-post-to-token-url

The only drawback is that this Flow Type ( Grant Type ) is less secure and is not even defined in OAuth 2.1 Grant Types.
Any other suggestions?

Thanks