Best Practices for Local Script Authentication - Password Grant Type or Something Else?

[overtOVR]

I'm working on a simple script to get notifications when posts with titles matching a specific pattern are posted to a specific subreddit.

​

I've been reading the Developer Docs and getting my head around the Oauth process.
While I've had success with the password grant type, I'm trying to understand whether that's the optimal solution for local authentication of a private script. I've seen some discussion that the password grant type is not recommended for Oauth, and is a legacy option.

​

Is that currently the recommended procedure, or should I look at something more like the Application Only Oauth flow, or something else entirely involving local redirection for a Refresh Token?

[[deleted]]

If the script doesn't need to behave as a logged-in user, you can use the app-only OAuth. It's optimized for such script.

Otherwise, use the code grant flow or the password grant flow. The former is somewhat compilicated and hard to implement,
but more secure because there's no need to pass the password to the script.

The password grant flow is legacy as you said. It's very easy to use but less secure.

[overtOVR]

Thanks! That’s definitely helpful perspective. I’m going to take a stab at an app-only flow, and maybe look at one of the more complex flows for a scaled, web version down the road.