Does anyone use OAuth with the client credentials flow to authorise requests? I get how to set it up I just don't know the best practises for the resource server knowing it is an internal service and not to perform user level authorisation. Any resources that describe this would be greatly appreciated