Protecting public clients using an authorization algorithm

• Дата: 2023
• Автори: Bodak, B.V., Doroshenko, A.Yu.
• Формат: Стаття
• Мова: Ukrainian
• Опубліковано: Інститут програмних систем НАН України 2023
• Теми: authorization; authentication; PKCE; Proof Key for Code Exchange; Identity Server; public application; OAUTH; XSS; information security; UDC 681.3
• Онлайн доступ: https://pp.isofts.kiev.ua/index.php/ojs1/article/view/542
• Назва журналу: Problems in programming

The paper focuses on authorization in public clients and provides a secure authorization model as an alternative to costly Microsoft Duende BFF solution. After providing a brief overview of confidential and public clients in terms of authorization, we have analyzed problems and potential attack vect...