I have an ios and node js app in which users grant permissions using only client side, and i'm trying not to send the access token to the server for security reasons - someone could intercept that message and use the access token. So I want to get the access token from the server side. Is this possible? I want no user interaction when doing this. For now, i have just got an App access token but i think this is not enough for me. Any suggestions are appreciated.
this and other resources were not helpful