Grant Types

← Back to OAuth 2.0

OAuth 2.0 flows for obtaining tokens: Authorization Code (+ PKCE, recommended for most apps), Client Credentials (machine-to-machine), and Device Code (limited-input devices). Implicit and Resource Owner Password grants are deprecated due to security concerns.

Key Properties

• Authorization Code with PKCE
• Client Credentials Flow
• Device Code Flow

---

authentication oauth grant-types