Wiring PKCE Login Into a Single-Page App With Okta (Without Hand-Rolling OAuth)
Okta's recommended SPA login is OIDC Authorization Code flow with PKCE. Here's the setup, a working okta-auth-js example, and the token-storage trade-off you need to decide on deliberately.
okta