some works about client credentials flow