title: AWS cloudFront and oauth2 with Autorization Code callback
body: <p>I am hosting my reactJs app on cloudFront, Lambda is the backend.
  I am integrating with 3-party oauth2 server, which supports only the authorization code grand type. I need to handle the callback with authorization code. My problem is that the callback will be directed to the cloudFront address, like this:</p>
  
  <pre><code>https://dicla0olcdd7.cloudfront.net/callback?code=ss540azzC7xL6nCJDWto
  </code></pre>
  
  <p>Do you think it is a safe approach? I am a bit worried that the code is send to a service out of my control. The code should never rich any place out of my app, right?
  What other solutions do I have?
  thx.</p>