Category: encryption

The answer to that is authorization code with Proof Key for Code Exchange. In this article, I will introduce and show you how to implement authorization code with PKCE flow in Single Page Apps.

The third-party app will stay authorized if it refreshes the RingCentral access token before the refresh token has expired, and will get a new refresh token and access token when it refreshes.

In the code exchanging step, the app will use the authorization code and the code_verifier to exchange the access token and refresh token.

In this article, we introduced how to authorize RingCentral APIs with the authorization code flow using PKCE, and compared it with the authorization code and implicit grant flow.

Related Articles