All OAuth2 grant types require the token via Basic HTTP auth.

All OAuth2 grant types require the token via Basic HTTP auth - at least, in the current draft (draft 30 right now).