Authenticating SPA+API with Authentication Server
I have been reading about OAuth and JWT in general. One question that has been troubling me is around authentication of SPA that use APIs to provide data.
As per my understanding -
SPA shows user a login page.
User grants credentials and hits login ...