Is there no way to acquire a User Access Token without a public web server with HTTPS?

So basically the workaround is to register and use localhost as the redirect_uri?