Using Authorization Code Flow with PKCE with non-native apps

Get Help
6

To follow up on this front, it appears there were two main solutions that helped in you in your quest. I will share them here for public historical data. Please let us know if you have any questions in the future!

  1. /authorize endpoint needed to be called from the browser, and not by the backend. You are able to generate the /authorize URL and pass it to the browser as a redirect.
  2. The above call will return a code that needs to be exchanged for tokens. The /oauth/token endpoint used for this purpose should be called from the backend (via Node.js).