Search code examples
identityserver4

How to find out to use best flow in IdentityServer?

How to find out the best flow for each applications types?

e.g:

  1. for web apps : asp.net mvc, php?
  2. for web apps : SPA (angular, react,…)
  3. for mobile apps : android, ios
  4. and for desktop apps?

is there any decision flowchart for that?

Solution

  • You should only use either the authorization code flow where users are involved or the client credential flow for machine to machine communication.

    All other flows has been deprecated, take a look at the OAuth 2.1 specification for guidance.

    Btw, OAuth 2.1 was just approved and you can hear all about it in this video