OAuth 2.0 Implicit Flow Detector
OAuth 2.0 Implicit Flow Detector
Extension stats
- webRequest
- webRequestBlocking
- https://*/*
Other platforms
Extension summary
Detect sites using the OAuth/OpenID Connect Implicit Flow.
Many websites use the OAuth and OIDC protocols (https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth) to manage web authentication and authorization.
While these standards are the best practice for web developers, many sites are still relying on the now deprecated Implicit flow (https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead) which isn't considered secure 🙁
This extension detects when a website is using the Implicit Flow and lets you know. It's a great way to stay conscious of the security of websites you use every day.
Extension safety
Risk impact
OAuth 2.0 Implicit Flow Detector requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.
Risk likelihood
OAuth 2.0 Implicit Flow Detector is very likely to contain malware and should not be trusted. Avoid installing.
Similar extensions
Here are some Chrome extensions that are similar to OAuth 2.0 Implicit Flow Detector:
4.11
5.00
4.31
N/A
4.13
4.40
N/A
N/A
5.00
5.00
N/A
3.85
4.17
N/A
4.93
4.67
2.50
N/A
N/A
5.00
2.00
2.00
3.00
5.00