What is the difference between confidential and public client types?

[zsamji]

Can you help me understand what is a public vs a confidential client?

[zsamji]

The short answer is that confidential clients can keep a secret while public clients do not require a secret.

Confidential Client

• Server-side applications (e.g., .Net, Java, PHP)

Public Client

• Javascript applications (e.g., SPA: single page application, Hybrid Mobile apps)
• Native Mobile apps, Embedded devices, and Internet of Things (e.g., Apple TV)
• Secured by PKCE (Proof Key for Code Exchange); a secret on the fly