B
Confidential OIDC client
App B
Authentication statusNot authenticated
Server-side authentication
The authorization code is redeemed on this application server. Browser requests then use an application session cookie.
The authorization code is redeemed on this application server. Browser requests then use an application session cookie.