Obtain access token via authorization code grant with PKCE in angular using oidc-client-js and Microsoft Identity Platform.

Photo by Ashwini Chaudhary on Unsplash

Recently, I learned about why implicit flow is not secure because of exposing the access token in the browser. Authorization code grant with PKCE is more secure and should be preferred over implicit flow for protecting a public application which cannot keep the client secret secure…