I made a cli example about the special OAuth 2.0 flow for native and mobile apps (developer.okta.com)