I want to use the API from a mobile (React Native) app with no server component. I cannot use the client secret because the app code is essentially public information. One solution would be to use the implicit OAuth flow but this doesn’t seem to be supported by FreeAgent.
What is the recommended approach?