Implicit Code Flow for Authentication

This flow is also similar to the Implicit grant type discussed in the OAuth chapter. This flow is used for single-page JavaScript apps or those apps which do not have a backend.

In Implicit flow, the response_type field can either take token or id_token or token_id_token as value. This leads to some interesting cases depending upon what is provided in the scope field.