OAuth 2.0 Authorization Flows Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering OAuth and OpenID Connect

What you'll be asked

  1. Which OAuth 2.0 flow is specifically recommended for single-page applications (SPAs) or mobile apps where the client cannot securely store a client secret?
  2. In the Authorization Code flow, what is the primary purpose of the 'Authorization Code' that is returned to the client's redirect URI?
  3. Which OAuth 2.0 flow is best suited for machine-to-machine (M2M) communication where no user is present, such as a background service or a daemon?
  4. When using OpenID Connect (OIDC), which specific token is responsible for providing identity information about the authenticated user in the form of claims?
  5. In a scenario using the Authorization Code flow with PKCE, why does the authorization server require the 'code_verifier' during the token exchange request?

Answers and explanations come after you submit.