{"action":"closed","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1377","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1377/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1377/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1377/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1377","id":78471989,"number":1377,"title":"Would this be a proper way to use code flow?","user":{"login":"rklachko","id":4252493,"avatar_url":"https://avatars.githubusercontent.com/u/4252493?v=3","gravatar_id":"","url":"https://api.github.com/users/rklachko","html_url":"https://github.com/rklachko","followers_url":"https://api.github.com/users/rklachko/followers","following_url":"https://api.github.com/users/rklachko/following{/other_user}","gists_url":"https://api.github.com/users/rklachko/gists{/gist_id}","starred_url":"https://api.github.com/users/rklachko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rklachko/subscriptions","organizations_url":"https://api.github.com/users/rklachko/orgs","repos_url":"https://api.github.com/users/rklachko/repos","events_url":"https://api.github.com/users/rklachko/events{/privacy}","received_events_url":"https://api.github.com/users/rklachko/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":{"login":"leastprivilege","id":1454075,"avatar_url":"https://avatars.githubusercontent.com/u/1454075?v=3","gravatar_id":"","url":"https://api.github.com/users/leastprivilege","html_url":"https://github.com/leastprivilege","followers_url":"https://api.github.com/users/leastprivilege/followers","following_url":"https://api.github.com/users/leastprivilege/following{/other_user}","gists_url":"https://api.github.com/users/leastprivilege/gists{/gist_id}","starred_url":"https://api.github.com/users/leastprivilege/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leastprivilege/subscriptions","organizations_url":"https://api.github.com/users/leastprivilege/orgs","repos_url":"https://api.github.com/users/leastprivilege/repos","events_url":"https://api.github.com/users/leastprivilege/events{/privacy}","received_events_url":"https://api.github.com/users/leastprivilege/received_events","type":"User","site_admin":false},"milestone":null,"comments":6,"created_at":"2015-05-20T10:40:31Z","updated_at":"2015-05-21T12:26:55Z","closed_at":"2015-05-21T12:26:55Z","body":"Would this be a valid way to use code flow:\r\nUsing code flow, exchanging the code into a reference token on the back channel then passing the reference token to the front channel and use it there to directly call the API (sending the reference token as Bearer token)? \r\nOr does it totally defeats the purpose of using code flow since the access token is kept on the front channel (user-agent).\r\nIf it's valid what would be the recommended way to pass it from back to front, and what would be the best way to store it on the front?"}}