> I found that to authenticate using Javascript Server, it requires using implicit grants on the API. This looks uncomfortably cheap, with the web browser openi

> I found that to authenticate using Javascript Server, it requires using implicit grants on the API. This looks uncomfortably cheap, with the web browser opening to authenticate. This sounds very odd and unlikely. Can't you just make HTTP requests by writing some JS? Maybe there is more you need to tell us to fill us in why the "implicit grants" are needed. I am taking it as "implicit grants" means permissions popup dialogs from iOS / Android. (https://www.androidhive.info/wp-content/uploads/2016/11/android-m-permissions.png https://www.androidhive.info/wp-content/uploads/2016/11/andr...) Tell us more (links to the API docs for example) and it will make it easier to answer your question. Disclosure: I am not affiliated with that link. I just googled for a picture and that was the first I found.