OpenID Connect: Understanding state, nonce, and code_challenge
When building applications with OpenID Connect (OIDC), you will often see parameters such as state, nonce, and code_challenge in the authorization request. At first, these parameters can look confusing because they are all random values. However, they solve different security problems. Understanding the difference is important when implementing authentication with providers such as Microsoft Entra […]
read more »