Draft 15

Huge thanks to @philippederyck for the massive amount of work that went into this update!

• Restructured document to have top-level recommended and discouraged architecture patterns
• Consolidated guidelines for public JS clients in a single section
• Added more focus on best practices at the start of the document
• Added Philippe De Ryck as an author

Draft 13

• Corrected some uses of "DOM"
• Consolidated CSRF recommendations into normative part of the document
• Added links from the summary into the later sections
• Described limitations of Service Worker storage
• Minor editorial improvements

Draft 12

draft-ietf-oauth-browser-based-apps-12

update changelog

Draft 11

• Added a new architecture pattern: Token Mediating Backend
• Revised and added clarifications for the Service Worker pattern
• Editorial improvements in descriptions of the different architectures
• Rephrased headers and rearranged some sections

Draft 10

draft-ietf-oauth-browser-based-apps-10

bump for deploy