Add login to a mobile app¶
Mobile applications, by design, cannot maintain any secrets. These kinds of applications are called public clients.
Based on the OAuth 2.0 best practices for browser-based apps, WSO2 Identity Server recommends securing your mobile apps using the OpenID Connect Authorization Code Flow for public clients with the PKCE (Proof Key for Code Exchange) extension.
See the guides given below to add login to your mobile applications with WSO2 Identity Server.