💡 User-delegated authorization: Obtain user consent for requested scopes and receive an access token that acts on their behalf with limited permissions.

💡 Perfect for input-constrained devices: Smart TVs, IoT devices, CLI tools - anything where typing credentials is painful. User authenticates on their phone/computer while the device polls for completion.

💡 Silent renewal: Get new access tokens without user interaction.

💡 Service-to-service authentication: No users involved - your backend service is both client and resource owner. Tokens represent the app's identity, not a user's. ⚠️ Never use in frontend code (exposes secret). No refresh tokens issued - just request new ones when expired.