chore: document consent requirement for non-https redirect schemes
@@ -36,3 +36,10 @@ POST /oauth2/token
client_id=...&
...
```
+
+:::note
+
+The public clients using a non-https redirect scheme cannot skip
+consent as per OpenID Sepcification & Certification.
+
+:::
