Steven Archibald
If I put this in appsettings.json in wwwroot, as suggested
{
“Okta”: {
“Authority”: “https://{yourOktaOrg}.okta.com/oauth2/default”,
“ClientId”: “{yourClientId}”
}
}
doesn’t this expose my Okta clientid to the world? How is that secure? What am I missing?