Protecting public clients using an authorization algorithm

• Datum: 2023
• Hauptverfasser: Bodak, B.V., Doroshenko, A.Yu.
• Format: Artikel
• Sprache: Ukrainian
• Veröffentlicht: Інститут програмних систем НАН України 2023
• Schlagworte: authorization; authentication; PKCE; Proof Key for Code Exchange; Identity Server; public application; OAUTH; XSS; information security; UDC 681.3
• Online Zugang: https://pp.isofts.kiev.ua/index.php/ojs1/article/view/542
• Назва журналу: Problems in programming

The paper focuses on authorization in public clients and provides a secure authorization model as an alternative to costly Microsoft Duende BFF solution. After providing a brief overview of confidential and public clients in terms of authorization, we have analyzed problems and potential attack vect...