More Secure JavaScript Single-Page Applications with MSAL 2.0 and OAuth 2.0 Auth Code Flow with PKCE

[@wpbest]

This is a great explanation. Awesome video animations. Excellent presentation. You are very charismatic. You have taken a topic that is full of technical algorithms, cryptically difficult to understand to easy to comprehend and enjoyable to watch. Thank you so much!

[@mahmoudalaskalany]

this is one of the greatest way to explain thing
keep up the good work

[@sdbhattacharya]

Thanks! Wonderful analogy

[@gadour97]

What's the code flow difference between Msal angular V1 and V2 ? i couldn't find anything online
I need this for a graduation project.

[@DotNetBob]

Thanks! Nice video. Do you have an example that does not require a user login? My REACT applications needs to call the secure services before a user logs in.

[@diegomachuca9815]

Awesome explanation! Github link is not working. I would love to check the source code.

[@Mydad-et1el]

Thank you! Great video!

[@movietime5333]

dear Jason, maybe you upload the repo back and I can be thankful forever ? :)

[@omersoncruz1081]

Awesome Explanation :)

[@amitkushwaha4097]

Github link mentioned in description not working.

[@vishnunair9933]

Great explanation! This video deserves more views.

[@PeeyushU]

Bravo!! on the analogy and the simple explanation:)

[@shishirarora8808]

cant hacker take that random number as well from users browser?

[@JayD3luxe]

had the same question ... do not understand, why this is more safe? How this key identifier is presented to the API ? as additional post parameter ?

[@joewilson27]

Hi, can I get refresh token? because the access_token only valid for 1 hour.

[@gregorywestneat5957]

Nice video, but this doesn't address refresh tokens

[@zeeshanahmad7853]

What if a hacker have a full envelop.?

[@shanluxue939]

Great video, thanks

[@kevindfs]

Someone have an example with Vue Js 3? (Javascript, no typescript)

[@_the_traveler]

Is it possible to do client credential workflow with this?

[@raghavcinch]

Why do I get CORS error in the token api.. I tried this locally ...

[@mhalton]

Bad analogy.