SPA API architecture scenarios clarification

An additional question to this. Why Authorization extension doesn’t recognize M2M app.