title: Connect angularjs webapp to REST API (PHP)
body: <p>I have a REST API written in PHP(<a href="http://www.slimframework.com/" rel="nofollow">Slim framework</a>) and my API contains some admin routes for managing private data. I've implemented oAuth2.0 for authorization(<a href="https://github.com/thephpleague/oauth2-server" rel="nofollow">this php implementation</a>). </p>
  
  <p>I like to use AngularJS for creating an admin webapplication so users can manage their own data.</p>
  
  <p>I'm now using username-password flow but i'm reading that this is not secure because my webapp exposes client_id &amp; client_secret.</p>
  
  <p>I also looked into implicit grant ( designed for public clients) but it says that it should be for read only purposes.</p>
  
  <p>I also want to use this API for supplying data for mobile apps. Users don't have to sign in for this but data isn't public.</p>
  
  <p>Which oauth grant is suitable for this scenario / setup?</p>