OAuth 2.0 Implicit Flow Detector by afitnerd, Okta Developer Advocacy

Detect sites using the OAuth/OpenID Connect Implicit Flow.

Many websites use the OAuth and OIDC protocols (https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth) to manage web authentication and authorization.

While these standards are the best practice for web developers, many sites are still relying on the now deprecated Implicit flow (https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead) which isn't considered secure 🙁

This extension detects when a website is using the Implicit Flow and lets you know. It's a great way to stay conscious of the security of websites you use every day.