Securely exchange authentication information between your single page app (SPA) and your Identity Provider (IdP) In 2021, it should come as no surprise that there are way better, more scalable ways to authenticate your users beyond a simple username and password check, especially if your SPA is a front for a sizable number of microservices and APIs. A common go-to for authentication is the OAuth specification which is a tremendous resource for all things Open Authorization. This explainer aims to simplify the complexities in the Proof Key for Code Exchange (PKCE) scheme as if you were to go ou