I’m currently using the API Authorization flow with a custom hosted login page which uses the lock widget to perform authentication. Everything works fine.
Now I wanted to completely customize the login page, so I started with the default template named “Custom Login Form”. The method used in this template is
webAuth.redirect.loginWithCredentials, which is deprecated and doesn’t implement the API Authorization Flow. So, what would be the correct method to call to perform authentication in this scenario?
webAuth.client.login, but in this case the client needs to have the password-realm grant and I’m not sure it’s the correct way to do it.