What it means is that when a client is registered with the AS that the AS 
know if it's a confidential or public client so that it can use the right 
flow. Public clients aren't really "authenticate-able" since any client 
secret can't really be kept secret (think native mobile app or pure JS 
apps). 

-- 
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to