The only time you should use the password grant: A 2-minute lesson on OAuth
In the previous video, I explained that OAuth resource owner password credential grants should not be used except for backward compatibility. I received a question asking, "Isn't it strange to say they shouldn't be used since it's written in RFC 6749?" So, I've explained what it means to use them for "backward compatibility," including answering that question. Enjoy…