The implicit grant type is used to obtain access tokens (it does not support the issuance of refresh tokens) and is optimized for public clients known to operate a particular redirection URI. These clients are typically implemented in a browser using a scripting language such as JavaScript.
This is a 2-step process:
After those steps, the client owns an access_token that can be used to authorize any subsequent
request.
Parse the location looking for a parameters set by the resource provider server after redirecting the resource owner (user).
Fails with ParseErr Empty when there's nothing
Redirects the resource owner (user) to the resource provider server using the specified authorization flow.
In this case, use
Tokenas aresponseType