Confidentials Client

tags :

OAuth 2.0 Client Types #

Description #

• A client capable of securely storing credentials (like a client secret).

Characteristics #

• Usually runs in a controlled environment where the client secret can be protected, such as on a server.
• Can authenticate itself securely with the authorization server.

Security Considerations #

• Capable of using grant types that involve client authentication, such as the client credentials grant or authorization code grant.
• Generally more secure due to its ability to safely store and manage credentials.

Examples #

1. Web applications running on a server
2. Backend services or server that can secure client secrets
3. Server-based applications requiring secure authentication with OAuth2