OAuth2 can check if grant_type is allowed by the client.