OAuth client types

OAuth 2.0: The importance of PKCE for confidential clients