Confidential client can obtain Authorization Code grant flow.
https://github.com/lepture/flask-oauthlib/issues/82