NONE (Public Client) Flow
For applications that have the tokenEndpointAuthMethod property set to NONE, you do not authenticate the token endpoint. The request requires the client_id property value in the request body and does not require an Authorization header. This method is used with PKCE authorization code flows for use with public clients.