Also, which OAuth flows does this support - authorisation code grant flow?