{"action":"created","issue":{"url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/66","labels_url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/66/labels{/name}","comments_url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/66/comments","events_url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/66/events","html_url":"https://github.com/andreareginato/oauth-ng/issues/66","id":55945236,"number":66,"title":"How does authorization code flow work without a server side component?","user":{"login":"kurtfm","id":2243297,"avatar_url":"https://avatars.githubusercontent.com/u/2243297?v=3","gravatar_id":"","url":"https://api.github.com/users/kurtfm","html_url":"https://github.com/kurtfm","followers_url":"https://api.github.com/users/kurtfm/followers","following_url":"https://api.github.com/users/kurtfm/following{/other_user}","gists_url":"https://api.github.com/users/kurtfm/gists{/gist_id}","starred_url":"https://api.github.com/users/kurtfm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kurtfm/subscriptions","organizations_url":"https://api.github.com/users/kurtfm/orgs","repos_url":"https://api.github.com/users/kurtfm/repos","events_url":"https://api.github.com/users/kurtfm/events{/privacy}","received_events_url":"https://api.github.com/users/kurtfm/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-29T19:33:16Z","updated_at":"2015-01-30T13:55:48Z","closed_at":null,"body":"Typically a purely client-side solution would only allow for 'implicit' flow since no client_secret is needed to get the access_token.  Without going too far with this I was wondering how you are doing the authorization code flow without storing the client_secret in client side code or is the intention that the code be picked up by the server and the access token call be done server side?"},"comment":{"url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/comments/72203849","html_url":"https://github.com/andreareginato/oauth-ng/issues/66#issuecomment-72203849","issue_url":"https://api.github.com/repos/andreareginato/oauth-ng/issues/66","id":72203849,"user":{"login":"andreareginato","id":37480,"avatar_url":"https://avatars.githubusercontent.com/u/37480?v=3","gravatar_id":"","url":"https://api.github.com/users/andreareginato","html_url":"https://github.com/andreareginato","followers_url":"https://api.github.com/users/andreareginato/followers","following_url":"https://api.github.com/users/andreareginato/following{/other_user}","gists_url":"https://api.github.com/users/andreareginato/gists{/gist_id}","starred_url":"https://api.github.com/users/andreareginato/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andreareginato/subscriptions","organizations_url":"https://api.github.com/users/andreareginato/orgs","repos_url":"https://api.github.com/users/andreareginato/repos","events_url":"https://api.github.com/users/andreareginato/events{/privacy}","received_events_url":"https://api.github.com/users/andreareginato/received_events","type":"User","site_admin":false},"created_at":"2015-01-30T13:55:48Z","updated_at":"2015-01-30T13:55:48Z","body":"If I got the question right, there no way at the moment to apply the authorization code flow on client side. All you can do is to get the token on server side and then store it in the AccessToken class."}}