We are in the process of migrating our application authentication flow to the new auth code flow. For context, our application is for customers in the United States.
In the present, our authentication flow is outlined as follows:
1. Merchant visits the root endpoint of our app "/"
2. Our application backend sends get request to Clover endpoint "oauth/token/"
3. Clover responds with oath access_token
4. Application saves new token to database
5. App redirects new merchant to our application endpoint "new-merchant/<merchant-id>"
In the Clover docs, there are two guides: "High trust apps - Auth code flow", and "Legacy token migration flow". Which one should we follow? And if possible, can you provide an overview for migration?
Thanks