How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Browser-Based OAuth Client: The architecture you shouldn't be using

calendar_today June 3, 2026 person Nathan Contino, Kim Maida domain fusionauth

Why BBOC is the least secure OAuth pattern, when it’s acceptable, how to implement it safely, and how to migrate to secure architectures.

open_in_new Read original post