Secure Your ASP.NET Web Forms Application with OpenID Connect and Okta

[oktadev-blog]

antony

Shouldn’t the grant type be Authorization Code instead of Implicit? The sample code appears to exchange the auth code for a token.