The Evolution of Security in Angular Apps
The security model for Angular apps has evolved from server-side sessions and early OAuth browser flows through PKCE and now toward a server-side BFF/auth-gateway boundary. This post follows that timeline, the current OAuth RFCs, and what the architecture means for Angular, microfrontends and Nx.