At the moment, Ditto only supports Client Credentials flow prior to HTTP calls to foreign HTTP APIs managed within a HTTP connection.

However, with more OAuth flows adopting PKCE (without defining a clientSecret), the password grant type is also an alternative which Ditto should support.

This issue suggests to provide this additional grant type to HTTP push connections.