OAuth 2.0 server supports password and refresh_token flow.