Confused OAuth Authorization Code Flow with OAuth Implicit Code Flow as their documentation aren’t separated and they seem to differ only in response_type and the steps required, so my request URL asked for response_type=code where it should have been response_type=token. The OAuth response_type=code isn’t a valid access_token and would need to be exchanged for the latter, therefore the 401 was legit.
1 Like