I found this code after reading Understanding OAuth2 and Deploying a Basic Authorization Service to Cloud Functions tutorial. I wanted to bring two items to your attention with the tutorial:
- "Download the code here" redirects to https://cloud.google.com/code and returns a 404 error
- The tutorial currently contains this content:

You write that implicit and client credentials are reserved for special clients, and then also reference implicit and client credentials as the flows that "other clients" can use. Is this a typo? Should it instead be something like:
Highly trusted apps -> Resource Owner Password Credentials
Less trusted apps -> Authorization Code
Thank you for the tutorial.
I found this code after reading Understanding OAuth2 and Deploying a Basic Authorization Service to Cloud Functions tutorial. I wanted to bring two items to your attention with the tutorial:
You write that implicit and client credentials are reserved for special clients, and then also reference implicit and client credentials as the flows that "other clients" can use. Is this a typo? Should it instead be something like:
Highly trusted apps -> Resource Owner Password Credentials
Less trusted apps -> Authorization Code
Thank you for the tutorial.