The implicit is only an example. As it works on GitHub without leaking a secret. So you could test it or look at the code. There is a regular oAuth example on my github as well
Generally you would use regular oAuth so you can get a token that you can refresh for the user