Overview#

"fragment" is the Fragment Response Mode parameter which indicates is an OAuth 2.0 Response_mode where Authorization Response parameters are encoded in the in the URI Fragment Identifiers added to the redirect_uri when redirecting back to the OAuth Client.

Fragment Response Mode Security Considerations#

• Covert Redirect Vulnerability

More Information#

There might be more information for this subject on one of the following:

• Authorization_endpoint
• Identity Token
• Response_mode
• Response_modes_supported
• Response_type