Mastering Microservices with Java - Third Edition

Client types

There are two types of client described by the specification, based on their ability to maintain the confidentiality of client credentials: confidential and public. Client credentials are secret tokens issued by the authorization server to clients in order to communicate with them. The client types are described as follows:

• Confidential client type: This is a client application that keeps passwords and other credentials securely or maintains them confidentially. In the example of a Quora sign-in using Twitter, the Quora application server is secure and has restricted access implementation. Therefore, it is of the confidential client type. Only the Quora application administrator has access to client credentials.
• Public client ...