This article reveals the differences between public and confidential clients in OAuth, with Logto applications as example.

Interesting post. This explains why I have to click the login button in every new tab that accesses the Azure Portal, even if I have an active session in the same browser. The Portal may be treated as a public client which is not trustable.