Which OAuth grant type is appropriate for mobile apps?
Authorization Code with PKCE
Resource Owner Password OAuth 2.0 for Native and Mobile Apps
Client Credentials
Device