diff --git a/src/flow/code-3.html b/src/flow/code-3.html index ce8279e..c9d6d7b 100644 --- a/src/flow/code-3.html +++ b/src/flow/code-3.html @@ -78,6 +78,12 @@ used by the authorization server to identify the application when redirecting the user back to the client.
+client_secret=
++ Client secret. Note that this flow is wrongly used for a JavaScript application, in which anyone can read the secret. +
+redirect_uri=
The redirect URI
@@ -160,6 +166,7 @@