Is there any reason why implicit flow doesn't validate which type of grant the client supports?
Is there any reason why implicit flow doesn't validate which type of grant the client supports?