6/26/2018 - 7:16 AM

Angular Client vs .NET MVC Client

Angular vs MVC .NET Client

- code runs in browser
- client to server communication
- Implicit flow 
  - uses predefined redirection uri
  - can be used to obtain access tokens (but no refresh tokens)
  - no client authentication (client secret cannot safely be stored)

- generate pages on the server & then sends them back to the browser
- code runs on the server
- server to server communcation (ui -> api)
- Client Credentials Flow
  - can be used to obtain access tokens using client credentials (clientid, client secret)
  - No human involved (no username/password)
- Authorization Code Flow (involves both User authentication & Client authorization (client secret)