Angular vs MVC .NET Client
Angular
- code runs in browser
- client to server communication
- Implicit flow
- uses predefined redirection uri
- can be used to obtain access tokens (but no refresh tokens)
- no client authentication (client secret cannot safely be stored)
.NET MVC
- generate pages on the server & then sends them back to the browser
- code runs on the server
- server to server communcation (ui -> api)
- Client Credentials Flow
- can be used to obtain access tokens using client credentials (clientid, client secret)
- No human involved (no username/password)
- Authorization Code Flow (involves both User authentication & Client authorization (client secret)