 <p>The Implicit Grant Type is being seen by many (lucadegasperi's oauth2-server-laravel among others) as the least secure of the OAuth2 grant types, therefore I recommend you to use JWT for your service website instead.</p> <p>To integrate JWT with Laravel, have a look at the following library. It works very well, and is also supported by the popular out-of-the-box API package Dingo for Laravel (<a href="https://github.com/dingo/api" rel="nofollow">https://github.com/dingo/api</a>):</p> <ul> <li><a href="https://github.com/tymondesigns/jwt-auth" rel="nofollow">https://github.com/tymondesigns/jwt-auth</a></li> </ul> <p>As for the app(s), if the app is a first-party app, go for the OAuth2 password grant as mentioned by Florens Morselli. If it is third-party app, use the authorization code grant instead.</p>