Why you should stop using the OAuth implicit grant
medium.com