Skip to content

Commit 2caea0d

Browse files
committed
Update text
1 parent 66c08f9 commit 2caea0d

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

aspnetcore/security/authentication/configure-oidc-web-authentication.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@ This article covers the following areas:
2626
## What is an OpenID Connect confidential interactive client
2727

2828
[OpenID Connect](https://openid.net/developers/how-connect-works/) can be used to implement authentication in ASP.NET Core applications. The recommended way is to use an OpenID Connect confidential client using the code flow. Using the [Proof Key for Code Exchange by OAuth Public Clients (PKCE)](https://datatracker.ietf.org/doc/html/rfc7636) is recommended for this implementation. Both the application client and the user of the application are authenticated in the confidential flow. The application client uses a client secret or a client assertion to authenticate.
29-
Public clients are no longer recommended for web applications.
29+
30+
Public OpenID Connect/OAuth clients are no longer recommended for web applications.
3031

3132
The default flow works as shown in the following diagram:
3233

0 commit comments

Comments
 (0)