Skip to main content

AppClientType

type AppClientType = typeof APP_CLIENT_TYPES[number];

OAuth client type of a developer application: whether it can keep a client secret.

  • confidential apps authenticate with their client secret at the token endpoint.
  • public apps (native apps, browser extensions, CLIs) cannot keep a secret: they must use PKCE, and exchange authorization codes with the code_verifier alone.