Skip to content

[Feature Request] PKCE with Non Interactive Authentication #729

Answered by rayluo
tanios13 asked this question in Q&A
Discussion options

You must be logged in to vote

I think you are mixing up different concepts here.

I would like to create a flask webapp where the user authenticates with the PublicClientApplication and not the ConfidentialClientApplication.

No. Based on OAuth2's client type definition, a (flask or not) webapp is typically a confidential client.

Besides, regardless of you use PublicClientApplication.acquire_token_interactive() or ConfidentialClientApplication.initiate_auth_code_flow(), MSAL Python automatically and always enables PKCE for you. So, "whether you should use PKCE" is not a decision factor when using MSAL Python.

For this, I read in the documentation that I should use PKCE.

Which doc did you read? It is probably not MSA…

Replies: 3 comments

Comment options

You must be logged in to vote
0 replies
Answer selected by rayluo
Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
2 participants
Converted from issue

This discussion was converted from issue #728 on August 02, 2024 19:33.