This was a new term for me as I started putting together my most recent study guide. SPA, which stands for Single-Page Application. While it sounds like a simple website, an SPA represents a fundamental shift in how web applications function, bringing unique challenges to the world of information security. Understanding SPAs is critical because they are the primary reason tools like PKCE and OIDC became industry standards.