Implicit Grant Flow

With the wide use of html5 history api I feel like the user should be redirect with a query string as default instead of hash.

What would be the benefit?

As I see it, it would just unnecessarily share the access token with the web server that doesn’t need it, and it would make it harder to support older and less developed browsers.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.