OAuth client types

OAuth 2.0: The importance of PKCE for confidential clients

This article further highlights the importance of using PKCE for confidential clients and describes a possible attack scenario