Add login to a mobile app
# Add login to a mobile app
Mobile applications, by design, cannot maintain any secrets. These kinds of applications are called public clients.
Based on the OAuth 2.0 best practices for browser-based apps (opens new window), Asgardeo recommends securing your mobile apps using the OpenID Connect Authorization Code Flow for public clients with the PKCE (Proof Key for Code Exchange (opens new window)) extension.
See the guides given below to add login to your mobile applications with Asgardeo.