DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
What's the recommended practice regarding the identity provider's own tokens once the OAuth/OIDC flow completes?
A
Pass them directly to the browser for all future authenticated requests
B
Treat them as an internal implementation detail — typically issue the app's OWN session/token to the user rather than passing the provider's tokens through for ongoing browser-side use
C
Discard them immediately with no further use
D
Store them in localStorage for convenience
Check Answer