Build a secure GraphQL API with Node.js

oktadev-blog · November 18, 2020, 5:18pm

Learn how to build a secure GraphQL API with Node.js.

oktadev-blog · November 22, 2020, 8:46pm

Hans

Hello, I have a question. It seems like you set up the resource server (API) to use the client credentials to access the token introspection endpoint of the authorization server (Okta) when verifying the client’s access token (JWT). Aren’t the client credentials supposed to be used on the client instead?