Hi @joshua, it took me a bit to find this, but I got an email from Dan, so I've emailed him a link to the repo I've put together

Hi @joshua, it took me a bit to find this, but I got an email from Dan, so I've emailed him a link to the repo I've put together

Thanks @joshua ! I ended up converting the Node sample to a .NET 5 app. I've got a couple more things to do with it, would you be interested in me raising a PR to have it added to your repo?

Hi everyone,

I want to set up a .NET 5 / React Application where the API & React App are hosted on the same domain, where the React app simply talks to the API and the API stores the tokens in session variables on the server while utilising code flow (PKCE). If I understand it correctly, this is the most secure way of storing tokens for a SPA app, compared to having the tokens stored in your browser somewhere. I can't seem to find any sample projects set up like this and would really appreciate some guidance.

Kind regards,

Andrew